Aliyun Use
v0.1.0Aliyun Bailian(百炼) for LLM chat, and language translation. Use when you need to generate code, generate text with LLMs, or translate between languages.
⭐ 0· 91·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, README, references/API.md and the included Python scripts consistently describe an Aliyun Bailian (DashScope) LLM client for chat, translate, and model listing. The single required credential (ALIYUN_BAILIAN_API_KEY) is appropriate for this purpose.
Instruction Scope
Runtime instructions and code stay within the stated purpose (call the Bailian/DashScope API). Minor inconsistencies: SKILL.md and code reference an optional ALIYUN_BAILIAN_API_HOST (used to override base URL) but that env var is not listed in requires.env metadata. There are also small mismatches in the default base URL between SKILL.md, references/API.md, and the code, but all point to DashScope endpoints. The scripts send requests only to the configured API host and do not read unrelated files or unrelated env vars.
Install Mechanism
No install spec (instruction-only install) and included code is pure Python with no network download/install steps. No external installers or archive downloads are requested.
Credentials
Only ALIYUN_BAILIAN_API_KEY is required (declared as primaryEnv), which is proportional. The SKILL.md/code also accept an optional ALIYUN_BAILIAN_API_HOST (not declared in metadata) — this is reasonable but should be declared. The code sets the API key in both Authorization Bearer and x-api-key headers (expected for some APIs).
Persistence & Privilege
Skill is not always-enabled, is user-invocable, and does not request elevated persistence or modify other skills or system-wide settings.
Assessment
This skill is a straightforward client for Alibaba Cloud Bailian (DashScope) LLMs and only needs your ALIYUN_BAILIAN_API_KEY. Before installing: 1) Confirm the API key is from the Bailian/DashScope console and is scoped appropriately (use minimal permissions and region-bound keys where possible). 2) Be aware the code will send your API key to whichever ALIYUN_BAILIAN_API_HOST is set (an optional env var); if you don't set it, a default DashScope host in the code will be used — verify that host is trusted. 3) The tests print a masked preview of your key; do not run tests if you are uncomfortable exposing even the last characters. 4) If you require strict metadata correctness, ask the publisher to add ALIYUN_BAILIAN_API_HOST to requires.env and to reconcile the base-URL defaults in SKILL.md / references. Otherwise the skill appears consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk977cxq4x10w5dzbsv36bttbxs837sff
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
OSLinux · macOS · Windows
EnvALIYUN_BAILIAN_API_KEY
Primary envALIYUN_BAILIAN_API_KEY