Alicloud Ai Content Aicontent

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

If the credentials have broad permissions, the agent could access or change more Alibaba Cloud AIContent resources than intended.

Why it was flagged

The skill may use Alibaba Cloud account credentials, including a local shared credential profile, to call AIContent APIs. This is expected for the service integration but is sensitive authority.

Skill content

Environment variables: `ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Shared config file: `~/.alibabacloud/credentials`

Recommendation

Use least-privilege Alibaba Cloud credentials, verify the account and region before use, and avoid exposing long-lived high-privilege AccessKeys.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

A mistaken resource identifier, region, or requested action could change the wrong AIContent configuration or workflow.

Why it was flagged

The skill explicitly supports mutating Alibaba Cloud AIContent resources. This matches the stated management purpose, but cloud mutations can have operational impact.

Skill content

Change/configure: prefer `Create*` / `Update*` / `Modify*` / `Set*` APIs for mutations.

Recommendation

Review proposed mutating API calls before execution, confirm region and resource IDs, and prefer list/describe checks before and after changes.