The Agent Skills Directory

[COMMAND_EXECUTION]: The shared client module scripts/_oss_client.py executes the aliyun CLI to verify caller identity using aliyun sts get-caller-identity. This is performed safely using subprocess argument lists, disabling shell invocation, and redirecting input to prevent command injection.
[EXTERNAL_DOWNLOADS]: The script scripts/_doc_lookup.py fetches documentation and an index file from help.aliyun.com. This facilitates runtime verification of configuration guidance against official Alibaba Cloud documentation. The implementation enforces a strict host whitelist and uses timeouts to ensure stability.
[CREDENTIALS_UNSAFE]: The skill resolves credentials by reading the local Alibaba Cloud CLI configuration file (~/.aliyun/config.json) into memory or using standard environment variables. This follows official best practices for credential management, avoids hardcoded secrets, and prohibits the agent from printing or explicitly passing sensitive tokens.
[PROMPT_INJECTION]: The skill's SKILL.md contains 'Absolute Rules' designed to enforce safety constraints on the agent, such as strictly prohibiting mutating API calls and manual credential handling. These instructions are intended to enhance safety and do not represent malicious injection patterns.

alibabacloud-oss-transfer-acceleration-diagnosis