ClawHub

Alicloud Ai Chatbot

v1.0.3

Manage Alibaba Cloud beebot (Chatbot) via OpenAPI/SDK. Use whenever the user asks to configure, query, or troubleshoot Alibaba Cloud chatbot resources, inclu...

⭐ 0· 1.2k·4 current·4 all-time
by@cinience
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included materials: SKILL.md describes using Alibaba Cloud OpenAPI/SDK to manage 'Chatbot' resources and the script fetches the Chatbot OpenAPI metadata from api.aliyun.com. No unrelated services or credentials are requested by the skill beyond what is necessary for cloud management tasks.
ℹ
Instruction Scope
The runtime instructions ask the agent to use Alibaba Cloud credentials (env vars or shared config) for SDK/API calls and to save artifacts under output/alicloud-ai-chatbot/. The included script itself only fetches public metadata from api.aliyun.com and writes API lists to the output directory. Be aware the SKILL.md explicitly instructs saving 'key parameters (region/resource id/time range)' in evidence files—this can include resource identifiers and timestamps (not secret keys). The instructions appropriately warn to ask the user before mutating operations.
✓
Install Mechanism
Instruction-only skill with no install spec. The only code is a small Python script that uses the standard library (urllib). No downloads from third-party URLs or archive extraction are present.
ℹ
Credentials
Registry metadata lists no required env vars, but SKILL.md expects optional Alibaba Cloud credentials (ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID) or ~/.alibabacloud/credentials. Those credentials are appropriate for managing cloud resources, but the manifest omission of these as declared requirements is an inconsistency the user should notice before granting keys.
✓
Persistence & Privilege
always is false and the skill is user-invocable. The skill does not request persistent/global privileges or modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: fetch OpenAPI metadata and provide guidance to call Alibaba Cloud Chatbot APIs. Two things to consider before installing or running mutating operations: (1) SKILL.md expects Alibaba Cloud credentials but the registry metadata didn't declare required env vars—treat that as an oversight and only provide credentials with least privilege (create a dedicated IAM user/role limited to Chatbot operations and no broader permissions). (2) The skill writes evidence and API artifacts to output/alicloud-ai-chatbot/; review those outputs for any sensitive identifiers before sharing. Because the skill's source/homepage is unknown, you may also want to verify the publisher or run the included script in a sandboxed environment first. Always confirm with the user before performing CREATE/UPDATE/DELETE actions.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bt40gn5sevnskscfq3krxtx82pw4n

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments