The Agent Skills Directory

[DATA_EXPOSURE]: The skill is configured to access standard Alibaba Cloud credential locations, including environment variables (ALIBABACLOUD_ACCESS_KEY_ID, ALIBABACLOUD_ACCESS_KEY_SECRET) and the shared credentials file located at ~/.alibabacloud/credentials. This is standard practice for cloud management tools and is required for its primary functionality.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external data by fetching OpenAPI metadata from the official Alibaba Cloud domain api.aliyun.com via the scripts/list_openapi_meta_apis.py script.
Ingestion points: API documentation JSON fetched from https://api.aliyun.com/meta/v1/products/CCC/... in scripts/list_openapi_meta_apis.py.
Boundary markers: Absent; the fetched content is parsed and saved directly to the output directory.
Capability inventory: The skill can execute python scripts, perform network requests (GET), and write to the local file system (output/ directory).
Sanitization: None; the script assumes the structure of the JSON response from the official Alibaba Cloud endpoint. Because the source is an official, well-known service, the risk is negligible.
[EXTERNAL_DOWNLOADS]: The script scripts/list_openapi_meta_apis.py performs network requests to fetch configuration and metadata from Alibaba Cloud's official metadata service (api.aliyun.com). This is documented as neutral behavior given the well-known nature of the service.

aliyun-ccc-manage