Alibabacloud Das Agent
v0.0.1Diagnose and manage Alibaba Cloud databases through natural language. Use when users need to troubleshoot database performance issues (high CPU, slow queries...
⭐ 0· 35·0 current·0 all-time
byalibabacloud-skills-team@sdk-team
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (an Alibaba Cloud DAS chat client) matches the code and documentation: the Python script constructs signed requests to das.cn-shanghai.aliyuncs.com and uses the Alibaba Cloud credentials chain. Minor inconsistency: SKILL.md and scripts say the DAS Agent ID is optional, but references/api-reference.md's table marks ALIBABA_CLOUD_DAS_AGENT_ID as required. SKILL.md also mentions 'AliyunHDMFullAccess' in compatibility while the RAM policies document lists only das:Chat; this is contradictory and worth confirming.
Instruction Scope
Runtime instructions are narrowly focused: run the provided Python client, supply questions, and rely on the Alibaba Cloud credentials default provider chain. The instructions explicitly describe credential sources (env vars, local profile files, ECS metadata) and how to disable metadata lookup. The script only targets the DAS Chat API endpoint; there are no instructions to read unrelated system files or transmit data to unknown endpoints.
Install Mechanism
This is instruction-only from the registry (no platform install spec), but the repo includes a pyproject.toml with pinned dependencies (alibabacloud_credentials, pytz, requests). Running the script requires a Python environment with those packages (the SKILL.md recommends 'uv'). This is a reasonable, traceable install surface (PyPI packages) — not a remote arbitrary binary download — but you must install dependencies locally or via the recommended tool before use.
Credentials
The skill requires Alibaba Cloud credentials via the default provider chain, which is appropriate for calling the DAS API. However, documentation inconsistencies exist: SKILL.md says AgentId is optional, API reference marks it required, and SKILL.md references a broad-sounding 'AliyunHDMFullAccess' permission while ram-policies.md lists only das:Chat. Confirm the minimum required permissions (prefer least-privilege das:Chat) and be aware the credential chain may read ~/.aliyun/config.json, ~/.alibabacloud/credentials.ini, or query ECS metadata (100.100.100.200) if running on an ECS instance.
Persistence & Privilege
The skill does not request permanent/always-on inclusion and does not modify other skills or system configuration. It runs as an invoked tool and prints results to stdout/JSON; no elevated platform privileges are requested.
Assessment
This skill appears to be what it claims: a client for Alibaba Cloud DAS Chat. Before installing or running it, do the following: (1) Verify and grant least-privilege credentials — prefer a role or RAM user with only the das:Chat permission rather than broad admin-like permissions. (2) Confirm whether ALIBABA_CLOUD_DAS_AGENT_ID is actually required for your use (SKILL.md says optional; another doc says required). (3) Install the Python dependencies from pyproject.toml in an isolated environment (venv) and review the included scripts yourself. (4) If you run the script on a machine that has cloud metadata access (ECS), be aware the SDK may automatically use the instance role; set ALIBABA_CLOUD_ECS_METADATA_DISABLED=true locally if you do not want that. (5) If you need stronger assurance, inspect the full call_das_agent.py file (it’s included) to confirm no unexpected network endpoints or data exfiltration beyond the official DAS API.Like a lobster shell, security has layers — review code before you run it.
latestvk97cvz9rkftkqtk5r88371nvhx840t8k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.