The Agent Skills Directory

[SAFE]: The skill implements a strictly read-only diagnosis flow for Alibaba Cloud OSS. It explicitly prohibits mutating API calls like DeleteObject or AbortMultipartUpload in its core instructions (SKILL.md) and technical implementation (_oss_client.py), focusing entirely on metadata analysis for recovery and residue detection.
[SAFE]: Credential management follows vendor best practices. The skill resolves credentials exclusively from the standard ALIBABA_CLOUD environment variables and the aliyun CLI configuration. It contains no hardcoded secrets and includes explicit rules against printing, reading, or passing credentials manually.
[SAFE]: Command execution via subprocess.run in _oss_client.py and sts_token.py is implemented securely using argument lists rather than shell strings, effectively preventing command injection. The calls are limited to the official aliyun CLI tool for identity verification purposes.
[SAFE]: External data fetching in _doc_lookup.py is constrained to the author's official documentation domain (help.aliyun.com). The script uses the Python standard library, implements a host whitelist, and performs basic sanitization of fetched markdown content before presentation.
[SAFE]: Dependencies are restricted to the official Alibaba Cloud Python SDK (oss2), which is the standard and expected library for interacting with the OSS control plane.

alibabacloud-oss-deletion-recovery-diagnosis