Alibabacloud Tair Devtoolset
v0.0.1Alicloud Service Scenario-Based Skill. Create Tair Enterprise Edition instance and configure public network access using Aliyun CLI. Triggers: "tair", "creat...
⭐ 0· 82·0 current·0 all-time
byalibabacloud-skills-team@sdk-team
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md and the included shell script all focus on creating Tair instances and configuring networking via the aliyun CLI. The required binaries (aliyun, jq) and RAM permissions referenced match the stated cloud operations.
Instruction Scope
Runtime instructions constrain the agent to use the provided script and to confirm all parameters with the user. The script runs aliyun r-kvstore commands, checks dependencies, validates parameters, obtains a local IP, writes the created INSTANCE_ID to /tmp/tair_instance_id.txt, and polls for status. These actions are within the stated purpose, but the script reads local network interface output (via ifconfig) to infer a public IP — this can be inaccurate behind NAT and may require the user to manually set MY_PUBLIC_IP.
Install Mechanism
This is instruction-only (no install spec); the included documentation instructs installing aliyun CLI from official aliyuncdn URLs or brew. The skill does not download third-party code during install and the script itself runs locally. No high-risk download/extract operations are present.
Credentials
The registry metadata lists no required env vars or primary credential, while SKILL.md and the CLI docs clearly require an existing Alibaba Cloud CLI configuration or environment credentials (AK/SK, STS, or ECS RAM role). This is coherent for this cloud automation use-case, but the metadata omission could mislead users who expect required credentials to be declared at install time.
Persistence & Privilege
The skill is not always-enabled, does not request system-wide persistence, and will not modify other skills. Its only on-disk write is a temporary file (/tmp/tair_instance_id.txt) to record the created instance ID, which is consistent with its purpose.
Assessment
This skill appears to do exactly what it says: it automates Tair instance creation and public endpoint configuration via the aliyun CLI and a provided script. Before installing or running it: 1) Be prepared to supply/confirm VPC_ID and VSWITCH_ID and other parameters — the script will stop if those are missing. 2) Ensure you have an Alibaba Cloud profile configured (AK/SK, STS, or ECS RAM role); the metadata doesn't list credentials, but SKILL.md requires them. 3) Grant only the RAM permissions the skill needs (see references/ram-policies.md) and follow least privilege — creating instances and allocating public endpoints can incur cost and permissions risk. 4) If you are behind NAT, manually set MY_PUBLIC_IP rather than relying on local ifconfig output to avoid misconfiguring the IP whitelist. 5) Review the script yourself (it is included) and confirm you are comfortable with it writing a temp instance ID file and calling aliyun commands. 6) Install aliyun CLI from official sources and keep your access keys secure (do not paste them into chat).Like a lobster shell, security has layers — review code before you run it.
latestvk97359d5mrvbt9qshc3avm14s584hbwr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
