Alibabacloud Emr Cluster Manage

ReviewAudited by ClawScan on May 10, 2026.

Overview

Prompt-injection indicators were detected in the submitted artifacts (ignore-previous-instructions); human review is required before treating this skill as clean.

Install only if you intend to let an agent manage Alibaba Cloud EMR resources. Use a dedicated low-privilege aliyun profile, review every create/scale/renew command and cost summary, and be cautious about the remote CLI installer and automatic plugin updates. ClawScan detected prompt-injection indicators (ignore-previous-instructions), so this skill requires review even though the model response was benign.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken or poorly confirmed command could create costs, alter cluster capacity, or remove compute nodes.

Why it was flagged

The skill is explicitly designed to run cloud APIs that create, renew, and resize EMR resources, including irreversible node shrink operations.

Skill content
`emr:RunCluster` | Create cluster ... Write operation; `emr:DecreaseNodes` | Shrink nodes ... Write operation (irreversible); `emr:UpdateClusterAutoRenew` | Configure cluster auto renewal ... Write operation
Recommendation

Use least-privilege RAM roles, require explicit confirmation for write operations, and review cost and node-change summaries before execution.

What this means

The agent will act with whatever Alibaba Cloud permissions are available in the selected CLI profile.

Why it was flagged

The skill relies on the user's configured Alibaba Cloud identity to perform EMR operations.

Skill content
Requires Alibaba Cloud CLI (aliyun >= 3.3.3), with AccessKey or STS Token configured. Verify credentials via `aliyun configure list`.
Recommendation

Use a dedicated profile or STS role scoped to the needed EMR actions, and avoid using broad administrator credentials.

What this means

Local CLI software or plugins may be installed or updated before cloud commands run.

Why it was flagged

The setup path can execute a remote installer and enables automatic, unpinned CLI plugin installation/update.

Skill content
run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` ... [MUST] run `aliyun configure set --auto-plugin-install true` ... [MUST] run `aliyun plugin update`
Recommendation

Prefer installing Alibaba Cloud CLI from a trusted, verified source, review plugin changes, and only enable automatic plugin installation if acceptable for the environment.