Alibabacloud Find Skills

Use this skill when users want to search, discover, browse, or find Alibaba Cloud (阿里云) agent skills. Triggers include: "find a skill for X", "search aliclou...

Security Scan

The skill's declared purpose (searching and installing Alibaba Cloud Agent Skills) aligns with its instructions and requirements; nothing requests unrelated credentials or surprising system access, but there are minor doc inconsistencies and a few install/operation details you should review before running commands on your machine.

Purpose & Capability

Name and description match the runtime instructions: the SKILL.md explains how to use the Aliyun CLI + agentexplorer plugin to list categories, search skills, view content, and guide installs. The requested permissions (agentexplorer read-only APIs) and commands are appropriate for a discovery/search skill.

Instruction Scope

Instructions stay within the discovery scope (call agentexplorer list-categories, search-skills, get-skill-content). The skill explicitly forbids reading/printing AK/SK and instructs users to configure credentials outside the session. However, the documentation has small inconsistencies (e.g., plugin name variations like 'agentexplorer' vs 'aliyun-cli-agentexplorer' and differing user-agent values in examples). Those are likely editorial errors but could cause confusion when following exact CLI commands.

Install Mechanism

There is no formal install spec for the skill itself (instruction-only), but the docs recommend installing/updating the official Aliyun CLI using curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash and downloading binaries from aliyuncli.alicdn.com. Those are official Alibaba CDN hosts (expected for Aliyun CLI). Curl|bash and moving binaries to /usr/local/bin are standard but carry the usual risk of executing remote install scripts — verify the URL and checksum before running if you require stricter controls.

Credentials

The skill requests no environment variables or secrets itself and only requires that the user have valid Alibaba Cloud credentials configured for the CLI. The RAM policy it recommends is read-only for agentexplorer and is proportionate to the skill's functionality. The SKILL.md also enforces not to print or request credentials in conversation.

Persistence & Privilege

Flags are benign: always:false and agent invocation/autonomy are default. The skill does instruct users to enable CLI settings (e.g., --auto-plugin-install and AI-Mode toggles) for convenience, but these are limited to the Aliyun CLI configuration and do not modify other skills or global agent settings outside the CLI.

Assessment

This skill appears to be what it says: a discovery/installer helper for Alibaba Cloud agent skills. Before using it: 1) Verify any install URLs (aliyuncli.alicdn.com) are the official Aliyun sources and, if you want stronger assurance, download and verify checksums rather than piping into bash. 2) Note the small doc inconsistencies (plugin name and user-agent string); follow the CLI's --help output and the acceptance-criteria guidance (it expects plugin name aliyun-cli-agentexplorer). 3) Do not paste credentials into chat — configure Aliyun CLI credentials locally as the instructions say. 4) The recommended RAM policy is read-only; attach only those permissions. 5) Inspect scripts (e.g., scripts/validate-skill.sh) locally before executing them. If you need higher assurance, ask the publisher for a canonical install command and checksum or request a signed release link.

Alibaba Cloud Agent Skills Search & Discovery

This skill helps users search, discover, and install Alibaba Cloud official Agent Skills through the agentexplorer CLI plugin.

Scenario Description

This skill enables users to:

1. Search Skills — Find Alibaba Cloud Agent Skills by keyword, category, or both
2. Browse Categories — Explore available skill categories and subcategories
3. View Skill Details — Get detailed information about specific skills
4. Install Skills — Guide users through skill installation process

Architecture: Alibaba Cloud CLI + agentexplorer Plugin → Skills Repository

Use Cases

• "Find a skill for managing ECS instances"
• "What Alibaba Cloud skills are available for databases?"
• "阿里云有哪些 OSS 相关的 skill?"
• "Browse all available alicloud skills"
• "Install a skill for RDS management"

Installation

Pre-check: Aliyun CLI >= 3.3.3 required

Run aliyun version to verify >= 3.3.3. If not installed or version too low, run curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash to install/update, or see references/cli-installation-guide.md for installation instructions. Then [MUST] run aliyun configure set --auto-plugin-install true to enable automatic plugin installation. Then [MUST] run aliyun plugin update to ensure that any existing plugins on your local machine are always up-to-date.

[MUST] CLI User-Agent — Every aliyun CLI command invocation must include: --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

Enable AI-Mode

Aliyun CLI provides AI-Mode. When enabled, the CLI automatically attaches AI identity information, allowing the server to identify and optimize Agent call chains.

# Enable AI-Mode
aliyun configure ai-mode enable

# Set AI-Mode user-agent identifier
aliyun configure ai-mode set-user-agent --user-agent "AlibabaCloud-Agent-Skills/alibabacloud-find-skills"

# Disable AI-Mode
aliyun configure ai-mode disable

Update Plugin

After installing plugins, update them periodically to get the latest features and fixes:

# Update installed CLI plugins
aliyun plugin update

Install agentexplorer Plugin

# Install the agentexplorer plugin
aliyun plugin install --names agentexplorer

# Verify installation
aliyun agentexplorer --help --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

Authentication

Pre-check: Alibaba Cloud Credentials Required

Security Rules:

• NEVER read, echo, or print AK/SK values (e.g., echo $ALIBABA_CLOUD_ACCESS_KEY_ID is FORBIDDEN)
• NEVER ask the user to input AK/SK directly in the conversation or command line
• NEVER use aliyun configure set with literal credential values
• ONLY use aliyun configure list to check credential status

aliyun configure list --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

Check the output for a valid profile (AK, STS, or OAuth identity).

If no valid profile exists, STOP here.

1. Obtain credentials from Alibaba Cloud Console
2. Configure credentials outside of this session (via aliyun configure in terminal or environment variables in shell profile)
3. Return and re-run after aliyun configure list shows a valid profile

RAM Policy

This skill uses read-only APIs from the AgentExplorer service. Required permissions: agentexplorer:ListCategories, agentexplorer:SearchSkills, agentexplorer:GetSkillContent. For the full RAM policy JSON, see references/ram-policies.md.

[MUST] Permission Failure Handling: When any command or API call fails due to permission errors at any point during execution, follow this process:

1. Read references/ram-policies.md to get the full list of permissions required by this SKILL
2. Use ram-permission-diagnose skill to guide the user through requesting the necessary permissions
3. Pause and wait until the user confirms that the required permissions have been granted

For detailed permission information, see references/ram-policies.md.

Core Workflow

Step 1: Search Skills

Based on user intent, choose keyword search, category search, or both:

• Keyword search: Extract keywords from the user's request and execute search directly
• Category search: Call list-categories to get all available categories, select the best match, and search
• Combined search: Use both keyword and category to narrow results

# Keyword search
aliyun agentexplorer search-skills \
  --keyword "<keyword>" \
  --max-results 20 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

# Get all categories
aliyun agentexplorer list-categories \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

# Category search
aliyun agentexplorer search-skills \
  --category-code "<category-code>" \
  --max-results 20 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

# Combined search (keyword + category)
aliyun agentexplorer search-skills \
  --keyword "<keyword>" \
  --category-code "<category-code>" \
  --max-results 20 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

Step 2: Iterate Until Found

If the target skill is not in the results, adjust search criteria and retry automatically:

1. Switch between Chinese and English keywords ("cloud server" → "ECS", "object storage" → "OSS")
2. Broaden keywords (drop qualifiers: "RDS backup automation" → "RDS")
3. Remove category filter, search by keyword only
4. Try synonyms or related terms ("instance" → "ECS", "bucket" → "OSS")
5. Browse the most relevant top-level category without keyword

Repeat until the target skill is found or confirmed not to exist. If all attempts fail, inform the user what was tried.

Step 3: View Skill Details (Optional)

Optionally retrieve skill content to verify it matches user intent before installation. This step can be skipped if the search results already provide sufficient information.

aliyun agentexplorer get-skill-content \
  --skill-name "<skill-name>" \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

Step 4: Install Skill

Execute the installation command for the target skill.

# Option A: Using npx skills add
npx skills add aliyun/alibabacloud-aiops-skills \
  --skill <skill-name>

# Option B: Using npx clawhub install (recommended for OpenClaw ecosystem)
npx clawhub install <skill-name>

Verify the skill appears in the available skills list after installation.

Command Reference

Parameters

Parameter Name	Required/Optional	Description	Default Value
keyword	Optional	Search keyword (product name, feature name, or description)	None
category-code	Optional	Category code for filtering (e.g., "computing", "computing.ecs")	None
max-results	Optional	Maximum number of results per page (1-100)	20
next-token	Optional	Pagination token from previous response	None
skip	Optional	Number of items to skip	0
skill-name	Required (for get-skill-content)	Unique skill identifier	None

Pagination

When search results span multiple pages, use next-token from the previous response to fetch the next page:

aliyun agentexplorer search-skills \
  --keyword "<keyword>" \
  --max-results 20 \
  --next-token "<next-token-from-previous-response>" \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

Success Verification

After each operation, verify success by checking:

1. List Categories: Response contains categoryCode and categoryName fields
2. Search Skills: Response contains skills array with valid skill objects
3. Get Skill Content: Response contains complete skill markdown content
4. Install Skill: Skill appears in Claude Code skills list

For detailed verification steps, see references/verification-method.md.

Search Strategies & Best Practices

1. Keyword Selection

• Use product codes: ecs, rds, oss, slb, vpc (English abbreviations work best)
• Chinese names: Also supported, e.g., "云服务器", "数据库", "对象存储"
• Feature terms: "backup", "monitoring", "batch operation", "deployment"
• Generic terms: When unsure, use broader terms like "compute", "storage", "network"

2. Category Filtering

• Browse first: Use list-categories to understand available categories
• Top-level categories: computing, database, storage, networking, security, etc.
• Subcategories: Use dot notation like computing.ecs, database.rds
• Multiple categories: Separate with commas: computing,database

3. Result Optimization

• Start broad: Begin with keyword-only search, then add category filters
• Adjust page size: Use --max-results based on display needs (20-50 typical)
• Check install counts: Popular skills usually have higher install counts
• Read descriptions: Match skill description to your specific use case

4. When No Results Found

# Strategy 1: Try alternative keywords
# Instead of "云服务器" try "ECS" or "instance"

# Strategy 2: Remove filters
# Drop category filter, search by keyword only

# Strategy 3: Browse by category
aliyun agentexplorer list-categories --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills
aliyun agentexplorer search-skills --category-code "computing" --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

# Strategy 4: Use broader terms
# Instead of "RDS backup automation" try just "RDS" or "database"

5. Display Results to Users

When presenting search results, format as table:

Found N skills:

| Skill Name | Display Name | Description | Category | Install Count |
|------------|--------------|-------------|----------|---------------|
| alibabacloud-ecs-batch | ECS Batch Operations | Batch manage ECS instances | Computing > ECS | 245 |
| ... | ... | ... | ... | ... |

Include:

• skillName: For installation and detailed queries
• displayName: User-friendly name
• description: Brief overview
• categoryName + subCategoryName: Classification
• installCount: Popularity indicator

Cleanup

This skill does not create any resources. No cleanup is required.

Best Practices

1. Always verify credentials first — Use aliyun configure list before any search operation
2. Iterate on search — Automatically adjust keywords and retry until the target skill is found or confirmed absent
3. Start with broad searches — Narrow down with filters if too many results
4. Show category structure — Help users understand available categories before filtering
5. Display results clearly — Use tables to make skill comparison easy
6. Provide skill names — Always show skillName field for installation
7. Handle pagination — Offer to load more results if nextToken is present
8. Check install counts — Guide users toward popular, well-tested skills
9. Show full details — Use get-skill-content before installation recommendation
10. Test after install — Verify skill is available after installation

Common Use Cases & Examples

Example 1: Find ECS Management Skills

# User: "Find skills for managing ECS instances"

# Step 1: Search by keyword
aliyun agentexplorer search-skills \
  --keyword "ECS" \
  --max-results 20 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

# Step 2: Display results table and get details for the best match
aliyun agentexplorer get-skill-content \
  --skill-name "alibabacloud-ecs-batch-command" \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

Example 2: Browse Database Skills

# User: "What database skills are available?"

# Step 1: List categories to show database category
aliyun agentexplorer list-categories \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

# Step 2: Search database category
aliyun agentexplorer search-skills \
  --category-code "database" \
  --max-results 20 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

# Step 3: Display results grouped by subcategory

Example 3: Search with Chinese Keyword

# User: "搜索 OSS 相关的 skill"

# Step 1: Search using Chinese or English keyword
aliyun agentexplorer search-skills \
  --keyword "OSS" \
  --max-results 20 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

# Step 2: Display results in user's preferred language

Example 4: Narrow Down Search

# User: "Find backup skills for RDS"

# Step 1: Combined search
aliyun agentexplorer search-skills \
  --keyword "backup" \
  --category-code "database.rds" \
  --max-results 20 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-find-skills

# Step 2: Display targeted results

Reference Documentation

Reference	Description
references/ram-policies.md	Detailed RAM permission requirements
references/related-commands.md	Complete CLI command reference
references/verification-method.md	Success verification steps for each workflow
references/cli-installation-guide.md	Alibaba Cloud CLI installation guide
references/acceptance-criteria.md	Testing acceptance criteria and patterns
references/category-examples.md	Common category codes and examples

Troubleshooting

Error: "failed to load configuration"

Cause: Alibaba Cloud CLI not configured with credentials.

Solution: Follow authentication section above to configure credentials.

Error: "Plugin not found"

Cause: agentexplorer plugin not installed.

Solution: Run aliyun plugin install --names aliyun-cli-agentexplorer

No Results Returned

Cause: Search criteria too specific or incorrect category code.

Solutions:

1. Try broader keywords
2. Remove category filter
3. Use list-categories to verify category codes
4. Try English product codes instead of Chinese names

Pagination Issues

Cause: Incorrect nextToken or skip value.

Solution: Use exact nextToken value from previous response, don't modify it.

Notes

• Read-only operations: This skill only performs queries, no resources are created
• No credentials required for browsing: Some operations may work without full credentials
• Multi-language support: Keywords support both English and Chinese
• Regular updates: Skills catalog is regularly updated with new skills
• Community skills: Some skills may be community-contributed, check descriptions carefully