The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the official Alibaba Cloud CLI package from https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz. This is a well-known service endpoint for Alibaba Cloud assets and is documented in the skill's references/sources.md as an official source.
[REMOTE_CODE_EXECUTION]: The skill automates the installation of the downloaded CLI binary. In SKILL.md, it provides a shell example using curl and tar, and in scripts/ensure_aliyun_cli.py, it uses urllib.request and tarfile to download and extract the binary to the local filesystem (defaulting to ~/.local/bin/aliyun) before executing it to verify the version. Since the source is a trusted vendor domain (alicdn.com), this is considered safe operational behavior for a platform management tool.
[COMMAND_EXECUTION]: The skill executes shell commands to interact with the Alibaba Cloud API. The scripts/ensure_aliyun_cli.py script uses subprocess.check_output to verify the installed version by running aliyun version. This is a standard verification step for CLI management.
[CREDENTIALS_SAFE]: The skill correctly instructs users to configure credentials via environment variables (ALIBABACLOUD_ACCESS_KEY_ID, etc.) or via the official aliyun configure command. It does not hardcode any secrets or attempt to exfiltrate them to external domains.

aliyun-cli-manage