Aliyun Aicontent Generate

Use when managing Alibaba Cloud AIContent (AiContent) via OpenAPI/SDK, including the user needs AI content generation or content workflow operations in Aliba...

Security Scan

The skill's functionality (Alibaba Cloud AIContent OpenAPI/SDK management) is coherent, but there are mismatches around credential handling and output/evidence guidance that could lead to unintended exposure of sensitive keys or unexpected behavior.

Purpose & Capability

Name, description, and the included script align with managing Alibaba Cloud AiContent OpenAPI metadata. However, the skill runtime instructions require Alibaba Cloud credentials (ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID and/or ~/.alibabacloud/credentials) while the registry metadata lists no required environment variables or primary credential — an inconsistency between claimed requirements and actual instructions.

Instruction Scope

SKILL.md stays on-topic (discover APIs, use SDK/OpenAPI Explorer, verify results). It explicitly tells the agent to read credentials from env vars or the shared config and to save artifacts and key parameters under output/aliyun-aicontent-generate/, which is useful for reproducibility but increases risk of writing sensitive parameters (region/resource id/time range and possibly credential-identifying info) to disk. The included script itself only fetches public metadata from api.aliyun.com and does not read local credentials, but the prose instructs broader SDK/API usage that would require credentials.

Install Mechanism

Instruction-only skill with a small harmless Python script; there is no install spec and no remote downloads. Script uses urllib to fetch metadata and writes to an output directory — low install risk.

Credentials

SKILL.md requires sensitive Alibaba Cloud credentials but the registry metadata didn't declare any required env vars or a primary credential. Requesting access keys (ID and SECRET) is appropriate for the intended operations, but the omission from the manifest is a mismatch and the skill's guidance to include key parameters in saved evidence could lead to accidental inclusion of sensitive data. No justification is provided for persistent storage of credentials in outputs.

Persistence & Privilege

The skill does not request always:true, does not modify other skills, and does not include installation steps that grant persistent elevated privileges. Autonomous invocation is enabled by default (platform normal), but that alone is not flagged.

What to consider before installing

This skill appears to do what it says (discover and call Alibaba Cloud AiContent APIs), but there are two practical concerns to check before installing or running it: - Credentials: SKILL.md expects ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET (and optionally ALICLOUD_REGION_ID or ~/.alibabacloud/credentials) even though the registry metadata does not declare these requirements. Only provide credentials if you trust the skill and the execution environment. Prefer temporary, least-privilege credentials or an IAM role scoped only to the AiContent APIs you need. - Output/evidence handling: The skill explicitly instructs saving artifacts and "key parameters" to output/aliyun-aicontent-generate/. Inspect output files before sharing; do not allow the skill to write long-lived secrets into that directory. Consider running the skill in an isolated environment or container so any accidental secrets written to disk are contained. - Autonomy and operations: The script included is benign and only fetches public OpenAPI metadata, but the SKILL.md allows the agent to call mutating APIs (Create/Update/Modify). Require user confirmation before any mutating operation and double-check region/resource selection. If you want stronger assurance, ask the publisher to update the registry metadata to declare the required env vars and to add an explicit warning about what the output files will contain (and to avoid writing secrets).

Category: service

AIContent

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for AIContent.

Workflow

1. Confirm region, resource identifiers, and desired action.
2. Discover API list and required parameters (see references).
3. Call API with SDK or OpenAPI Explorer.
4. Verify results with describe/list APIs.

AccessKey priority (must follow)

1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
2. Shared config file: ~/.alibabacloud/credentials

API discovery

• Product code: AiContent
• Default API version: 20240611
• Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

1. Inventory/list: prefer List* / Describe* APIs to get current resources.
2. Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
3. Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/aliyun-aicontent-generate/

Validation

mkdir -p output/aliyun-aicontent-generate
for f in skills/ai/content/aliyun-aicontent-generate/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-aicontent-generate/validate.txt

Pass criteria: command exits 0 and output/aliyun-aicontent-generate/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/aliyun-aicontent-generate/.
• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

• Configure least-privilege Alibaba Cloud credentials before execution.
• Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
• If region is unclear, ask the user before running mutating operations.

References

• Sources: references/sources.md