Alicloud Ai Cloud Call Center

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can act with whatever Alibaba Cloud permissions those credentials grant.

Why it was flagged

The skill directs the agent to use Alibaba Cloud credentials, including a local shared credential store, to authenticate for CCC operations.

Skill content
Environment variables: `ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Shared config file: `~/.alibabacloud/credentials`
Recommendation

Use a least-privilege Alibaba Cloud key limited to the intended CCC actions, and avoid using broad administrator credentials.

What this means

Incorrect region, resource ID, or action choices could modify the wrong CCC resource or disrupt call-center configuration.

Why it was flagged

The skill explicitly supports mutating Alibaba Cloud CCC resources. This is purpose-aligned, but those calls can change real cloud call-center configuration.

Skill content
Change/configure: prefer `Create*` / `Update*` / `Modify*` / `Set*` APIs for mutations.
Recommendation

Review the target region, resource identifiers, and exact API action before allowing mutating operations; use describe/list calls first when unsure.

What this means

Local output files may retain sensitive operational context about the user's Alibaba Cloud CCC environment.

Why it was flagged

The skill stores local evidence files that may contain operational details such as resource IDs, regions, time ranges, and API response summaries.

Skill content
Save artifacts, command outputs, and API response summaries under `output/alicloud-ai-cloud-call-center/`. Include key parameters (region/resource id/time range) in evidence files
Recommendation

Avoid saving secrets or unnecessary customer data in output files, and clean the output directory when the evidence is no longer needed.