The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run to call the aliyun CLI for identity verification purpose (sts get-caller-identity). This is a legitimate use of the vendor's diagnostic tools and does not use a shell environment for execution.
[EXTERNAL_DOWNLOADS]: The script _doc_lookup.py fetches a documentation index and markdown content from the official Alibaba Cloud help center (help.aliyun.com). The implementation includes host whitelisting and request timeouts.
[INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection by fetching documentation content from an external site and incorporating it into the agent's context.
Ingestion points: scripts/_doc_lookup.py fetches markdown data from public Alibaba Cloud documentation URLs.
Boundary markers: Documentation excerpts are interpolated into the diagnostic report without explicit boundary markers or instructions to ignore embedded commands.
Capability inventory: The skill possesses capabilities for shell command execution via the aliyun CLI and read-only OSS metadata queries via the official SDK.
Sanitization: Excerpts are cleaned of common markdown syntax and truncated to a 500-character limit before being presented to the agent.

alibabacloud-oss-quota-throttling-diagnosis