Aliyun Mps Manage

Use when managing Alibaba Cloud ApsaraVideo for Media Processing (MPS/MTS) resources and workflows via OpenAPI/SDK, including media ingest and metadata tasks...

Security Scan

The skill appears to do what it claims (manage Alibaba Cloud MPS), but its metadata omits the sensitive environment variables and config path the runtime instructions expect, which is an inconsistency you should resolve before installing.

Purpose & Capability

The name, description, SKILL.md, and included script all align with managing Alibaba Cloud ApsaraVideo for Media Processing (MPS). The included Python script fetches the MTS OpenAPI metadata and the SKILL.md lists MPS-specific API operations — these are coherent with the stated purpose. However, the skill registry metadata declares no required credentials or config paths while the runtime instructions explicitly expect Alibaba Cloud credentials/config — this metadata omission is inconsistent.

Instruction Scope

The SKILL.md stays largely within scope: it instructs discovery via OpenAPI metadata, read-only validation first, then controlled mutate operations, and to write evidence under output/aliyun-mps-manage/. It also references a shared config file (~/.alibabacloud/credentials) and environment variables for credentials — these are relevant to the task but are not declared in the registry metadata. The instructions do not direct data to unexpected external endpoints beyond api.aliyun.com.

Install Mechanism

This is an instruction-only skill with one small Python script. There is no install spec, no external binary download, and the script uses Python's standard library urllib to fetch metadata from api.aliyun.com. There is no evidence of high-risk install behavior.

Credentials

The SKILL.md expects sensitive credentials (ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, ALICLOUD_REGION_ID) and a shared credentials file (~/.alibabacloud/credentials). Those are appropriate for interacting with Alibaba Cloud APIs, but the skill registry metadata did not declare them as required. This mismatch means the skill may access secrets that the registry doesn't advertise. The script also looks at OPENAPI_META_TIMEOUT via env var (not declared). Require least-privilege/ephemeral credentials and confirm the registry is updated.

Persistence & Privilege

The skill is not always-enabled and is user-invocable (defaults). It does not request persistent system-wide privileges, nor does it modify other skills' configuration. It writes outputs into a local output/ directory as instructed.

What to consider before installing

This skill's code and instructions are consistent with an Alibaba Cloud MPS management tool, but the registry metadata omits the sensitive environment variables and credentials the SKILL.md expects. Before installing: (1) Confirm you will provide dedicated, least-privilege Alibaba Cloud RAM or STS credentials (do not reuse production root keys). (2) Inspect outputs written to output/aliyun-mps-manage/ for any secrets before sharing. (3) Run the provided validation steps in an isolated/test account to confirm behavior. (4) Ask the publisher to update registry metadata to declare required env vars (ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID and any config paths) and to document any other env vars (e.g., OPENAPI_META_TIMEOUT). (5) If you do not want the agent to call cloud APIs autonomously, avoid enabling autonomous invocation or only invoke the skill manually.

Category: service

ApsaraVideo for Media Processing (MPS)

Validation

mkdir -p output/aliyun-mps-manage
python -m py_compile skills/media/mps/aliyun-mps-manage/scripts/list_openapi_meta_apis.py
echo "py_compile_ok" > output/aliyun-mps-manage/validate.txt

Pass criteria: command exits 0 and output/aliyun-mps-manage/validate.txt is generated.

Output And Evidence

• Save API inventory and operation evidence under output/aliyun-mps-manage/.
• Keep region, pipeline/template/workflow IDs, media IDs, and request parameters in evidence files.

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage MPS resources. Prefer metadata-first API discovery before mutate operations.

Prerequisites

• Prepare least-privilege RAM AccessKey/STS credentials.
• Confirm target region and OSS input/output buckets before changes.
• Use read-only query APIs first.

Workflow

1. Confirm target media scope, bucket binding, and desired operation.
2. Discover API names and required parameters via OpenAPI metadata and API Explorer.
3. Execute read-only validation calls.
4. Execute pipeline/template/workflow/job operations.
5. Save outputs and evidence under output/aliyun-mps-manage/.

AccessKey Priority

1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID.
2. Shared config file: ~/.alibabacloud/credentials.

If region is ambiguous, ask before write operations.

API Discovery

• Product code: Mts
• Default API version: 2014-06-18
• Metadata source: https://api.aliyun.com/meta/v1/products/Mts/versions/2014-06-18/api-docs.json

Minimal Executable Quickstart

python skills/media/mps/aliyun-mps-manage/scripts/list_openapi_meta_apis.py

Optional overrides:

python skills/media/mps/aliyun-mps-manage/scripts/list_openapi_meta_apis.py \
  --product-code Mts \
  --version 2014-06-18 \
  --output-dir output/aliyun-mps-manage

Common Operation Mapping

• Pipeline operations: AddPipeline, UpdatePipeline, QueryPipelineList, SearchPipeline
• Template operations: AddTemplate, UpdateTemplate, QueryTemplateList, SearchTemplate
• Workflow operations: AddMediaWorkflow, UpdateMediaWorkflow, QueryMediaWorkflowList, ListMediaWorkflowExecutions
• Job operations: SubmitJobs, QueryJobList, ListJob, CancelJob
• Snapshot and analysis: SubmitSnapshotJob, QuerySnapshotJobList, SubmitAnalysisJob
• Media and bucket management: AddMedia, UpdateMedia, DeleteMedia, BindInputBucket, BindOutputBucket

Output Policy

Write all generated files and execution evidence under: output/aliyun-mps-manage/

References

• Source list: references/sources.md
• Task templates: references/templates.md