Alicloud Network Dns Cli

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward Alibaba Cloud DNS CLI guide, but it can change live DNS records and uses Alibaba Cloud credentials, so it should be used with least-privilege access.

Install this only if you want the agent to help manage Alibaba Cloud DNS. Use least-privilege credentials, confirm every domain and record value before changes, and consider verifying the aliyun CLI download through official checksums or release documentation.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could help add or update DNS records, which may redirect traffic or affect service availability if parameters are wrong.

Why it was flagged

The skill documents a mutating DNS command. This is expected for a DNS management skill, but DNS changes can affect real domain routing and should be explicitly confirmed.

Skill content
aliyun alidns AddDomainRecord --DomainName example.com --RR news --Type CNAME --Value <TARGET>
Recommendation

Verify the domain, record name, type, value, and region before allowing any mutating DNS operation.

What this means

Over-privileged Alibaba Cloud keys could allow broader cloud account changes than intended if misused.

Why it was flagged

The skill requires Alibaba Cloud access credentials for DNS operations. This is purpose-aligned, but those credentials may grant significant account authority depending on their permissions.

Skill content
--access-key-id <AK> --access-key-secret <SK>
Recommendation

Use a least-privilege RAM user or role limited to the exact DNS zones and actions needed, and avoid sharing long-lived account-wide keys.

What this means

The installed CLI version may change over time, and users have less assurance that the downloaded file matches an expected release.

Why it was flagged

The install instructions download the latest CLI binary archive directly, without a pinned version or checksum verification. This is a common setup pattern and is central to the skill, but it reduces reproducibility.

Skill content
curl -fsSL https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz -o /tmp/aliyun-cli.tgz
Recommendation

Prefer official installation instructions with checksum or signature verification when available, and review the installed CLI source and version before use.