Aliyun Green Moderation

Use when managing Alibaba Cloud Content Moderation (Green) via OpenAPI/SDK, including the user needs content moderation resource and policy operations, inclu...

Security Scan

The skill's code and runtime instructions are consistent with managing Alibaba Cloud Green (content moderation) via OpenAPI; it requests the expected Alibaba Cloud credentials and only fetches public API metadata and writes local artifacts.

Purpose & Capability

Name/description match the behavior: the skill discovers and calls Alibaba Cloud Green APIs. The SKILL.md expects Alibaba Cloud credentials and region configuration which are appropriate for this purpose. The included script fetches API metadata from api.aliyun.com (expected).

Instruction Scope

Instructions are scoped to discovery and management of Alibaba Cloud Green APIs. They reference environment variables and the Alibaba shared credentials file (~/.alibabacloud/credentials), call the documented meta endpoints, and direct outputs to a local output/ directory. There are no instructions to read unrelated system files or exfiltrate data to unexpected endpoints.

Install Mechanism

This is an instruction-only skill with one small Python script; there is no install spec and no downloads from third-party URLs. The script uses urllib to fetch public metadata — low install/runtime risk.

Credentials

SKILL.md requires Alibaba Cloud credentials (ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET and optional ALICLOUD_REGION_ID) and optionally the shared credentials file — these are proportional to the stated function. Minor inconsistency: the registry metadata lists 'Required env vars: none' while the runtime instructions do expect credentials; users should be aware to supply appropriate credentials.

Persistence & Privilege

The skill is not forced-always, is user-invocable, and does not request elevated platform persistence. It only writes artifacts to its own output directory and does not modify other skills or system-wide configs.

Assessment

This skill will use your Alibaba Cloud credentials (env vars or ~/.alibabacloud/credentials) to call Green (content moderation) APIs and will fetch API metadata from https://api.aliyun.com. Before installing: provide least-privilege credentials (create a role/key that only allows the needed Green operations), confirm the region before running any mutating actions, and review the output/aliyun-green-moderation/ directory for saved artifacts. Note that the package registry metadata does not declare required env vars even though SKILL.md expects them — make sure you supply credentials only if you trust the environment and require this functionality.

Category: service

Content Moderation (Green)

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for Content Moderation.

Workflow

1. Confirm region, resource identifiers, and desired action.
2. Discover API list and required parameters (see references).
3. Call API with SDK or OpenAPI Explorer.
4. Verify results with describe/list APIs.

AccessKey priority (must follow)

1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
2. Shared config file: ~/.alibabacloud/credentials

API discovery

• Product code: Green
• Default API version: 2022-09-26
• Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

1. Inventory/list: prefer List* / Describe* APIs to get current resources.
2. Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
3. Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/aliyun-green-moderation/

Validation

mkdir -p output/aliyun-green-moderation
for f in skills/security/content/aliyun-green-moderation/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-green-moderation/validate.txt

Pass criteria: command exits 0 and output/aliyun-green-moderation/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/aliyun-green-moderation/.
• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

• Configure least-privilege Alibaba Cloud credentials before execution.
• Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
• If region is unclear, ask the user before running mutating operations.

References

• Sources: references/sources.md