Aliyun Gbi Analytics

Use when managing Alibaba Cloud DataAnalysisGBI via OpenAPI/SDK, including the user needs DataAnalysisGBI resource lifecycle operations, configuration change...

Security Scan

The skill's purpose (managing Alibaba Cloud DataAnalysisGBI) matches the included code and instructions, but the package metadata omits required credentials and the runtime instructions give the agent discretion to pick regions and perform mutations — these inconsistencies warrant caution.

Purpose & Capability

The skill claims to manage Alibaba Cloud DataAnalysisGBI (expected to need Alibaba Cloud credentials). However, the registry metadata lists no required environment variables or primary credential, while SKILL.md explicitly requires ALICLOUD_ACCESS_KEY_ID/ALICLOUD_ACCESS_KEY_SECRET and optionally ALICLOUD_REGION_ID or ~/.alibabacloud/credentials. This mismatch between declared requirements and the runtime instructions is incoherent.

Instruction Scope

SKILL.md instructs the agent to use OpenAPI/SDK calls and to prefer environment variables or a shared credentials file; it also allows the agent to choose a 'reasonable region' if ALICLOUD_REGION_ID is unset. The included script only fetches public metadata (safe), but the broader instructions authorize making mutating API calls and writing artifact/evidence files with key parameters. The explicit permission to auto-decide region and the lack of a declared requirement for credentials grant the agent concerning discretion.

Install Mechanism

There is no install spec and the only included script uses Python's standard library to fetch public OpenAPI metadata from api.aliyun.com. No downloads from untrusted hosts, no archive extraction, and no third-party package installs are present; this is low-risk.

Credentials

The SKILL.md requires Alibaba Cloud access keys and optionally a credentials file, which are appropriate for this skill's purpose, but the registry metadata does not declare these env vars or a primary credential. Requiring unmanaged secrets without declaring them in metadata reduces transparency and makes it unclear whether the agent will access sensitive credentials or how they are supplied. Additionally, instructions to include key parameters in evidence files risk writing sensitive identifiers to disk if not controlled.

Persistence & Privilege

The skill does not request always:true, does not modify other skills or global agent settings, and only writes outputs under its own output/aliyun-gbi-analytics directory as documented. Autonomy (model invocation) is enabled by default, which is normal but should be considered together with the other concerns.

What to consider before installing

This skill appears to implement the documented Alibaba Cloud DataAnalysisGBI metadata discovery, but you should not install it without clarifying and controlling credential use. Ask the publisher to update registry metadata to explicitly list required env vars (ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, ALICLOUD_REGION_ID) and to state whether the skill will ever perform mutating operations. Until then: (1) provide only least-privilege, read-only Alibaba credentials if you plan to run listing/describe operations; (2) never give full admin keys without explicit review; (3) require the agent to prompt you before any Create/Update/Delete calls or before picking a default region; and (4) audit output/aliyun-gbi-analytics/ for sensitive data and avoid automatic uploads of that directory. If the publisher supplies an updated manifest that declares the credentials and documents mutation behavior, my confidence would increase toward benign.

Category: service

DataAnalysisGBI

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for DataAnalysisGBI.

Workflow

1. Confirm region, resource identifiers, and desired action.
2. Discover API list and required parameters (see references).
3. Call API with SDK or OpenAPI Explorer.
4. Verify results with describe/list APIs.

AccessKey priority (must follow)

1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
2. Shared config file: ~/.alibabacloud/credentials

API discovery

• Product code: DataAnalysisGBI
• Default API version: 2024-08-23
• Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

1. Inventory/list: prefer List* / Describe* APIs to get current resources.
2. Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
3. Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/aliyun-gbi-analytics/

Validation

mkdir -p output/aliyun-gbi-analytics
for f in skills/data-analytics/aliyun-gbi-analytics/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-gbi-analytics/validate.txt

Pass criteria: command exits 0 and output/aliyun-gbi-analytics/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/aliyun-gbi-analytics/.
• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

• Configure least-privilege Alibaba Cloud credentials before execution.
• Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
• If region is unclear, ask the user before running mutating operations.

References

• Sources: references/sources.md