Alicloud Ai Cloud Call Center

• Verdict: Pass
• Confidence: High
• Analyzed: May 10, 2026, 4:02 PM
• Findings: 3
• Version: 1.0.3

Overview

This appears to be a coherent Alibaba Cloud Call Center management helper, but it can use Alibaba Cloud credentials and make real cloud configuration changes.

Use this skill only if you intend to manage Alibaba Cloud CCC. Configure a least-privilege AccessKey, verify region and resource IDs before mutations, and review or delete saved output files after use.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI03: Identity and Privilege Abuse

NoteHigh Confidence

What this means

The agent can act with whatever Alibaba Cloud permissions those credentials grant.

Why it was flagged

The skill directs the agent to use Alibaba Cloud credentials, including a local shared credential store, to authenticate for CCC operations.

Skill content

Environment variables: `ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Shared config file: `~/.alibabacloud/credentials`

Recommendation

Use a least-privilege Alibaba Cloud key limited to the intended CCC actions, and avoid using broad administrator credentials.

ASI02: Tool Misuse and Exploitation

NoteHigh Confidence

What this means

Incorrect region, resource ID, or action choices could modify the wrong CCC resource or disrupt call-center configuration.

Why it was flagged

The skill explicitly supports mutating Alibaba Cloud CCC resources. This is purpose-aligned, but those calls can change real cloud call-center configuration.

Skill content

Change/configure: prefer `Create*` / `Update*` / `Modify*` / `Set*` APIs for mutations.

Recommendation

Review the target region, resource identifiers, and exact API action before allowing mutating operations; use describe/list calls first when unsure.

ASI06: Memory and Context Poisoning

NoteHigh Confidence

What this means

Local output files may retain sensitive operational context about the user's Alibaba Cloud CCC environment.

Why it was flagged

The skill stores local evidence files that may contain operational details such as resource IDs, regions, time ranges, and API response summaries.

Skill content

Save artifacts, command outputs, and API response summaries under `output/alicloud-ai-cloud-call-center/`. Include key parameters (region/resource id/time range) in evidence files

Recommendation

Avoid saving secrets or unnecessary customer data in output files, and clean the output directory when the evidence is no longer needed.