Alicloud Ai Misc Crawl And Skill
ReviewAudited by ClawScan on May 10, 2026.
Overview
This appears to be a disclosed maintenance skill for crawling Alibaba Cloud model documentation and updating local summaries or generated skill files, with cautions around an unpinned npx crawler and broad repository file changes.
This skill is reasonable for repository maintenance, but run it only in a controlled workspace or branch. Pin or verify the npm crawler, then review generated summaries, README edits, and any `skills/ai/**` changes before accepting or publishing them.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The crawler package would run locally with the user's normal permissions, so a compromised or changed package version could affect the workspace.
The workflow downloads and runs an npm package without a pinned version. This is purpose-aligned for crawling, but the package code is not included in the reviewed artifacts.
npx -y @just-every/crawl "https://help.aliyun.com/zh/model-studio/models" > alicloud-model-studio-models.md
Pin the crawler package version, review its provenance, and run the workflow in a disposable branch or sandbox.
Incorrect generated changes could alter, break, or expand behavior of other local AI skills.
The skill explicitly authorizes broad changes to generated AI skill files. This matches the stated purpose, but those files can affect future agent behavior and the workflow does not specify review or rollback controls.
Regenerate skills (creates/updates `skills/ai/**`)
Run only in a repository you intend to modify, review all diffs before keeping or publishing changes, and consider adding an approval step before writing generated skill files.