Alicloud Ai Contactcenter Ai

ReviewAudited by ClawScan on May 1, 2026.

Overview

The skill coherently supports Alibaba Cloud ContactCenterAI management, but it should only be used with least-privilege cloud credentials because it can make real account changes.

Before installing, make sure you trust the skill owner and only provide least-privilege Alibaba Cloud credentials. Confirm the region, resource ID, and requested action before allowing create, update, modify, or set operations, and review any saved API summaries for sensitive resource details.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

With valid Alibaba Cloud credentials, the agent could create or modify ContactCenterAI resources or settings.

Why it was flagged

This documents intended authority to make real ContactCenterAI configuration or lifecycle changes in an Alibaba Cloud account. It is purpose-aligned, but the actions can affect cloud resources.

Skill content
Change/configure: prefer `Create*` / `Update*` / `Modify*` / `Set*` APIs for mutations.
Recommendation

Use least-privilege credentials, confirm the exact region/resource/action before mutations, and ask for verification output after changes.

What this means

The agent can act with whatever Alibaba Cloud permissions are available to those credentials.

Why it was flagged

The skill may use Alibaba Cloud AccessKeys or a local shared credential profile. This is expected for Alibaba Cloud management, but it grants delegated account authority and should be carefully scoped.

Skill content
Environment variables: `ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Shared config file: `~/.alibabacloud/credentials`
Recommendation

Provide a narrowly scoped RAM user or role for ContactCenterAI tasks, avoid broad administrator keys, and do not save secrets in output artifacts.