Aliyun Anytrans Translate

Use when managing Alibaba Cloud TongyiTranslate (AnyTrans) via OpenAPI/SDK, including the user needs translation service resource operations in Alibaba Cloud...

Security Scan

The skill's files and instructions are consistent with a tool for discovering and calling Alibaba Cloud AnyTrans (TongyiTranslate) OpenAPI metadata and APIs; it does request access to Alibaba credentials (via env vars or shared config) which is coherent for its purpose but the registry metadata omitted these declarations.

Purpose & Capability

Name/description match the included script and SKILL.md: both focus on discovering AnyTrans OpenAPI metadata and guiding API calls for TongyiTranslate. The single Python script fetches api-docs.json from api.aliyun.com which is consistent with API discovery functionality.

Instruction Scope

SKILL.md tells the agent to use environment variables and/or ~/.alibabacloud/credentials for credentials, run the included discovery script, call SDK/OpenAPI for resource operations, and write artifacts under output/aliyun-anytrans-translate/. It also advises asking the user before mutating resources. The instructions may cause the agent to read the user's Alibaba Cloud credentials file or environment variables — that is appropriate for making API calls but worth noting.

Install Mechanism

No install spec (instruction-only) and only a small Python script is included. No downloads from external URLs or archive extraction. Lowest-risk install surface.

Credentials

SKILL.md requires/priortizes ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, and optional ALICLOUD_REGION_ID or shared config ~/.alibabacloud/credentials. Those credentials are proportionate for calling Alibaba Cloud APIs. However, the registry metadata did not declare required env vars or config paths, which is an inconsistency you should be aware of.

Persistence & Privilege

always is false and the skill does not request persistent or elevated agent privileges. It writes artifacts to a local output/ path only and does not modify other skills or system configs.

Assessment

This skill appears to do what it says: discover AnyTrans OpenAPI metadata and help call Alibaba Cloud APIs. Before installing: 1) Only provide least-privilege Alibaba credentials (create a dedicated user with minimal rights). Prefer setting ALICLOUD_ACCESS_KEY_ID/SECRET in environment variables rather than leaving broad credentials in shared config. 2) Note the registry metadata omitted declaring these env vars — verify you are comfortable with the skill reading ~/.alibabacloud/credentials if present. 3) Review the included Python script (it only fetches public API metadata from api.aliyun.com and writes to output/). 4) Do not allow the agent to run mutating operations autonomously without an explicit check — the SKILL.md advises asking the user first. 5) If you do not trust the source (homepage unknown), run the script in an isolated sandbox or inspect/modify it before use.

Category: service

TongyiTranslate

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for TongyiTranslate.

Workflow

1. Confirm region, resource identifiers, and desired action.
2. Discover API list and required parameters (see references).
3. Call API with SDK or OpenAPI Explorer.
4. Verify results with describe/list APIs.

AccessKey priority (must follow)

1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
2. Shared config file: ~/.alibabacloud/credentials

API discovery

• Product code: AnyTrans
• Default API version: 2025-07-07
• Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

1. Inventory/list: prefer List* / Describe* APIs to get current resources.
2. Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
3. Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/aliyun-anytrans-translate/

Validation

mkdir -p output/aliyun-anytrans-translate
for f in skills/ai/translation/aliyun-anytrans-translate/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-anytrans-translate/validate.txt

Pass criteria: command exits 0 and output/aliyun-anytrans-translate/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/aliyun-anytrans-translate/.
• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

• Configure least-privilege Alibaba Cloud credentials before execution.
• Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
• If region is unclear, ask the user before running mutating operations.

References

• Sources: references/sources.md