The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to install official Alibaba Cloud Python SDK packages including alibabacloud_ecs20140526, alibabacloud_tea_openapi, alibabacloud_credentials, and alibabacloud_cms20190101. These are verified libraries from a well-known service provider.
[COMMAND_EXECUTION]: The script scripts/run_remote_command.py provides a wrapper for the Alibaba Cloud Assistant RunCommand API. This allows the agent to execute shell or PowerShell scripts on remote ECS instances. While this is a high-privilege capability, it is a standard and intended administrative function of the ECS service.
[INDIRECT_PROMPT_INJECTION]: The skill ingests output from remote command executions, which constitutes a potential injection surface if the remote instance is compromised.
Ingestion points: The run_remote_command.py script decodes and processes stdout and stderr returned by the DescribeInvocationResults API.
Boundary markers: The script does not implement specific delimiters or safety instructions when presenting command output to the agent.
Capability inventory: The skill can manage instance lifecycles, modify security groups, manage disks/snapshots, and execute further remote commands.
Sanitization: Standard base64 decoding is performed, but no content-based sanitization is applied to the output data.

aliyun-ecs-manage