The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides instructions for installing the Alibaba Cloud CLI using a curl | bash pattern.
Evidence: Found in SKILL.md and references/cli-installation-guide.md: curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash.
Context: The download source aliyuncli.alicdn.com is a verified vendor domain belonging to Alibaba Cloud (the author of the skill). This is a standard installation method for the vendor's official tooling.
[COMMAND_EXECUTION]: The skill is designed to interact with the system shell to execute aliyun CLI commands for project management.
Evidence: Multiple instances of aliyun maxcompute ... commands throughout SKILL.md.
Controls: The skill includes explicit instructions for the agent to validate user input, such as checking for empty project names and trimming whitespace from quota identifiers, to prevent common command injection mistakes.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill implements strict safeguards against the exposure of sensitive credentials.
Evidence: The Forbidden Actions section in SKILL.md explicitly prohibits reading or echoing AK/SK (Access Key/Secret Key) values and environment variables like ALIBABA_CLOUD_ACCESS_KEY_ID. It mandates the use of masked output through aliyun configure list.

alibabacloud-odps-project-manage