Alicloud Ai Content Aicontent

PassAudited by ClawScan on May 10, 2026.

Overview

This skill is a coherent Alibaba Cloud AIContent helper, but users should notice that it may use Alibaba Cloud credentials and perform cloud resource changes when asked.

Install only if you intend to manage Alibaba Cloud AIContent resources. Configure least-privilege Alibaba Cloud credentials, confirm the target region and resource IDs, and review any Create/Update/Modify/Set operations before allowing them to run.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the credentials have broad permissions, the agent could access or change more Alibaba Cloud AIContent resources than intended.

Why it was flagged

The skill may use Alibaba Cloud account credentials, including a local shared credential profile, to call AIContent APIs. This is expected for the service integration but is sensitive authority.

Skill content
Environment variables: `ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Shared config file: `~/.alibabacloud/credentials`
Recommendation

Use least-privilege Alibaba Cloud credentials, verify the account and region before use, and avoid exposing long-lived high-privilege AccessKeys.

What this means

A mistaken resource identifier, region, or requested action could change the wrong AIContent configuration or workflow.

Why it was flagged

The skill explicitly supports mutating Alibaba Cloud AIContent resources. This matches the stated management purpose, but cloud mutations can have operational impact.

Skill content
Change/configure: prefer `Create*` / `Update*` / `Modify*` / `Set*` APIs for mutations.
Recommendation

Review proposed mutating API calls before execution, confirm region and resource IDs, and prefer list/describe checks before and after changes.