Aliyun Airec Manage
ReviewAudited by ClawScan on May 10, 2026.
Overview
This skill is a coherent Alibaba Cloud AIRec management helper, but it does use cloud credentials and can make account-changing API calls, so users should run it with least-privilege access and confirm mutations.
Install or use this skill only if you intend the agent to manage Alibaba Cloud AIRec. Configure a least-privilege AccessKey, verify the region and resource IDs before any mutation, and review local files written under output/aliyun-airec-manage/ before sharing them.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used with powerful credentials, the agent could create or change AIRec resources in the user's Alibaba Cloud account.
The skill explicitly supports mutating Alibaba Cloud AIRec resources. This is aligned with the management purpose, but those API calls can change cloud configuration or resources.
Change/configure: prefer `Create*` / `Update*` / `Modify*` / `Set*` APIs for mutations.
Use least-privilege Alibaba Cloud credentials, confirm the target region and resource identifiers, and require explicit user approval before create, update, modify, or set operations.
The agent may act in the Alibaba Cloud account associated with those credentials.
The skill may use Alibaba Cloud account credentials from environment variables or the local shared credentials file. This is expected for Alibaba Cloud management, but it gives the agent delegated account authority.
Environment variables: `ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Shared config file: `~/.alibabacloud/credentials`
Provide only scoped, least-privilege credentials for AIRec tasks, avoid broad administrator keys, and check generated output files before sharing them.