The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill automates the installation of the Alibaba Cloud CLI (aliyun-cli) during environment setup. It downloads binaries from the official vendor CDN (aliyuncli.alicdn.com). Evidence: references/execution-phases.md Step 0.1 includes logic to download and extract the CLI. Mitigation: The skill performs SHA256 integrity verification using pinned hashes stored in references/cli-meta.md before execution.
[COMMAND_EXECUTION]: The skill performs extensive cloud resource management through the aliyun CLI, including creating ECS instances, RDS databases, and VPC networks. Evidence: Defined in references/sku-params/ YAML files and references/execution-phases.md. Mitigation: Robust hard gates are implemented, specifically a mandatory Payment Gate requiring explicit user confirmation before any billable API call, and a SKU Gate preventing unauthorized package selection.
[INDIRECT_PROMPT_INJECTION]: The skill processes structured data (SKU names and prescriptions) passed from the alibabacloud-opc-advisor skill. Ingestion points: SKU name from conversation context or advisor prescription. Capability inventory: Full resource lifecycle management (creation/deletion/tagging) via Aliyun CLI. Boundary markers: Includes strict Iron Rules and Hard Gates to validate intent. Sanitization: Inputs are validated against a static list of 7 supported SKUs and mapped to predefined YAML parameter files.
[EXTERNAL_DOWNLOADS]: The skill contacts external services ifconfig.me or ipinfo.io to determine the user's public IP address. Evidence: references/execution-phases.md Phase 2.4. Purpose: Legitimate security requirement to restrict SSH access (port 22) to the user's specific IP rather than leaving it open to the entire internet (0.0.0.0/0).

alibabacloud-opc-deploy