Alicloud Ai Chatbot

Manage Alibaba Cloud beebot (Chatbot) via OpenAPI/SDK. Use whenever the user asks to configure, query, or troubleshoot Alibaba Cloud chatbot resources, inclu...

Security Scan

The skill's files and instructions are coherent with a tool for managing Alibaba Cloud Chatbot (beebot); it fetches public OpenAPI metadata and instructs using Alibaba credentials for actual API calls, which is proportionate to the stated purpose.

Purpose & Capability

Name/description match the included materials: SKILL.md describes using Alibaba Cloud OpenAPI/SDK to manage 'Chatbot' resources and the script fetches the Chatbot OpenAPI metadata from api.aliyun.com. No unrelated services or credentials are requested by the skill beyond what is necessary for cloud management tasks.

Instruction Scope

The runtime instructions ask the agent to use Alibaba Cloud credentials (env vars or shared config) for SDK/API calls and to save artifacts under output/alicloud-ai-chatbot/. The included script itself only fetches public metadata from api.aliyun.com and writes API lists to the output directory. Be aware the SKILL.md explicitly instructs saving 'key parameters (region/resource id/time range)' in evidence files—this can include resource identifiers and timestamps (not secret keys). The instructions appropriately warn to ask the user before mutating operations.

Install Mechanism

Instruction-only skill with no install spec. The only code is a small Python script that uses the standard library (urllib). No downloads from third-party URLs or archive extraction are present.

Credentials

Registry metadata lists no required env vars, but SKILL.md expects optional Alibaba Cloud credentials (ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID) or ~/.alibabacloud/credentials. Those credentials are appropriate for managing cloud resources, but the manifest omission of these as declared requirements is an inconsistency the user should notice before granting keys.

Persistence & Privilege

always is false and the skill is user-invocable. The skill does not request persistent/global privileges or modify other skills or system-wide settings.

Assessment

This skill appears to do what it says: fetch OpenAPI metadata and provide guidance to call Alibaba Cloud Chatbot APIs. Two things to consider before installing or running mutating operations: (1) SKILL.md expects Alibaba Cloud credentials but the registry metadata didn't declare required env vars—treat that as an oversight and only provide credentials with least privilege (create a dedicated IAM user/role limited to Chatbot operations and no broader permissions). (2) The skill writes evidence and API artifacts to output/alicloud-ai-chatbot/; review those outputs for any sensitive identifiers before sharing. Because the skill's source/homepage is unknown, you may also want to verify the publisher or run the included script in a sandboxed environment first. Always confirm with the user before performing CREATE/UPDATE/DELETE actions.

Category: service

Chatbot (beebot)

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for beebot.

Workflow

1. Confirm region, resource identifiers, and desired action.
2. Discover API list and required parameters (see references).
3. Call API with SDK or OpenAPI Explorer.
4. Verify results with describe/list APIs.

AccessKey priority (must follow)

1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
2. Shared config file: ~/.alibabacloud/credentials

API discovery

• Product code: Chatbot
• Default API version: 2022-04-08
• Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

1. Inventory/list: prefer List* / Describe* APIs to get current resources.
2. Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
3. Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/alicloud-ai-chatbot/

Validation

mkdir -p output/alicloud-ai-chatbot
for f in skills/ai/service/alicloud-ai-chatbot/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/alicloud-ai-chatbot/validate.txt

Pass criteria: command exits 0 and output/alicloud-ai-chatbot/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/alicloud-ai-chatbot/.
• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

• Configure least-privilege Alibaba Cloud credentials before execution.
• Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
• If region is unclear, ask the user before running mutating operations.

References

• Sources: references/sources.md