Alibaba Cloud
v1.0.0Alibaba Cloud integration. Manage data, records, and automate workflows. Use when the user wants to interact with Alibaba Cloud data.
⭐ 0· 12·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Alibaba Cloud and the SKILL.md instructs using the Membrane CLI to create connections, run actions, and proxy API requests. Requiring a connector and a Membrane account is coherent with the described purpose.
Instruction Scope
Instructions are limited to installing and using the Membrane CLI, performing login flows, listing/creating connections, running actions, and optionally proxying raw API requests. A notable operational detail: proxying requests via Membrane means API calls and data will transit (and may be stored/processed) by the Membrane service — this is expected for a proxy-based integration but worth confirming against your data-handling requirements.
Install Mechanism
There is no baked install spec in the package, but the docs instruct installing @membranehq/cli via npm (global) or using npx. Installing npm packages (especially global installs) runs third-party code on the host and requires trust in the package and publisher; this is proportionate to the skill's stated function but carries normal supply-chain/install risks.
Credentials
The skill declares no required environment variables, no local config paths, and no primary credential. All credential management is delegated to Membrane (the documented login flow). The requested scope of access (an account/connector) aligns with the integration purpose.
Persistence & Privilege
The skill is instruction-only, has no install-time modifications declared, and does not request 'always: true' or any elevated persistence. Agent autonomous invocation is allowed (platform default) but not combined with other red flags.
Assessment
This skill is internally consistent: it uses Membrane as an intermediary to talk to Alibaba Cloud. Before installing/using it, verify the Membrane service and CLI: review the @membranehq/cli npm package source, consider using npx (avoids a global install), and read Membrane's privacy/security docs to confirm how API requests and credentials are handled. Use least-privilege Alibaba Cloud credentials when connecting (create a dedicated role/account for the integration), and avoid pasting secrets into chat or prompts. If you require that API traffic not pass through a third-party proxy, this skill's architecture may be unsuitable.Like a lobster shell, security has layers — review code before you run it.
latestvk977x6xqhjqrygjvk31p4sbqt984a7y6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.