Aliyun Aimiaobi Generate
ReviewAudited by ClawScan on May 10, 2026.
Overview
This appears to be a coherent Alibaba Cloud AiMiaoBi management skill, but it can use Alibaba Cloud credentials to make account changes and save response summaries locally.
Install only if you intend to let the agent operate Alibaba Cloud AiMiaoBi through your credentials. Use least-privilege AccessKeys, confirm all create/update/modify actions, and check generated output files for sensitive cloud details before sharing.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may create or modify AiMiaoBi-related cloud resources if you ask it to do so.
The skill explicitly supports mutating Alibaba Cloud resources through OpenAPI. This is aligned with the management purpose and paired with a workflow to confirm region, resource identifiers, and desired action, but cloud changes can still have real account impact.
Change/configure: prefer `Create*` / `Update*` / `Modify*` / `Set*` APIs for mutations.
Use least-privilege credentials and confirm the exact region, resource ID, and operation before allowing mutating API calls.
If available credentials have broad permissions, the agent could perform actions beyond the narrow AiMiaoBi task you intended.
The skill may use Alibaba Cloud account credentials, including a local shared credentials file. This is expected for Alibaba Cloud OpenAPI use, but it is high-impact access and the registry metadata does not declare a primary credential.
Environment variables: `ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Shared config file: `~/.alibabacloud/credentials`
Provide a restricted Alibaba Cloud credential limited to the necessary AiMiaoBi APIs and avoid using broad administrator credentials.
Local output files may reveal details about your Alibaba Cloud resources if they are shared or committed accidentally.
The skill intentionally persists operational evidence and API response summaries locally. This is scoped and useful for reproducibility, but those files may contain cloud resource identifiers or operational details.
Save artifacts, command outputs, and API response summaries under `output/aliyun-aimiaobi-generate/`. Include key parameters (region/resource id/time range) in evidence files for reproducibility.
Review and redact generated output files before sharing them, and avoid saving secrets or full sensitive API responses unless necessary.