Aliyun Aimiaobi Generate

Use when managing Alibaba Cloud Quan Miao (AiMiaoBi) via OpenAPI/SDK, including the user asks for Alibaba Cloud MiaoBi content operations, including listing...

Security Scan

The skill's code and instructions match its Alibaba Cloud purpose, but the package metadata does not declare the Alibaba Cloud credentials or config file the SKILL.md requires — this inconsistency merits caution before installing or granting credentials.

Purpose & Capability

The name, description, and included script (which fetches AiMiaoBi OpenAPI metadata) are consistent: the skill legitimately needs Alibaba Cloud access to perform management tasks. However, the registry metadata declares no required credentials or primaryEnv while the SKILL.md explicitly instructs use of ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID or ~/.alibabacloud/credentials. The missing declaration is an inconsistency.

Instruction Scope

SKILL.md instructs the agent to read environment variables and fall back to the shared credentials file (~/.alibabacloud/credentials) and to write output artifacts including 'key parameters (region/resource id/time range)' to output/. The instructions therefore reference accessing local credential files and environment variables that are not listed in the skill's declared requirements — this mismatch expands the runtime scope and should be clarified before use.

Install Mechanism

This is an instruction-only skill with no install spec. That minimizes install-time risk; the included Python script is small, uses urllib to fetch public api.aliyun.com metadata, and writes to a local output directory.

Credentials

The SKILL.md requests Alibaba Cloud access keys (and an optional region) which are proportionate to the stated purpose. However, the skill package metadata does not list these required env vars or a primary credential, creating an opaque credential requirement. The skill does not request unrelated credentials, but the omitted declaration is a red flag.

Persistence & Privilege

The skill does not request permanent/always presence (always: false) and contains no install hooks. It only writes artifacts under its own output/ directory and does not modify other skills or agent-wide settings.

What to consider before installing

Before installing or running this skill: 1) Treat the package metadata omission as a warning — SKILL.md expects Alibaba Cloud credentials (ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET) and may read ~/.alibabacloud/credentials; confirm you are willing to provide those. 2) Use least-privilege credentials or temporary/role-based credentials scoped to the AiMiaoBi APIs only. 3) Inspect the outputs directory before sharing them — evidence files may contain resource identifiers or other context you consider sensitive. 4) Because the skill source/homepage is unknown, consider doing a quick code review (the included Python script only fetches public api.aliyun.com metadata) and run the provided validation (py_compile) in an isolated environment. 5) Ask the publisher to update the registry metadata to declare required env vars/primary credential so the credential requirement is explicit. If you cannot verify the publisher or do not want to provide cloud credentials, do not install or run this skill.

Category: service

Quan Miao

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for Quan Miao.

Workflow

1. Confirm region, resource identifiers, and desired action.
2. Discover API list and required parameters (see references).
3. Call API with SDK or OpenAPI Explorer.
4. Verify results with describe/list APIs.

AccessKey priority (must follow)

1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
2. Shared config file: ~/.alibabacloud/credentials

API discovery

• Product code: AiMiaoBi
• Default API version: 2023-08-01
• Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

1. Inventory/list: prefer List* / Describe* APIs to get current resources.
2. Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
3. Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/aliyun-aimiaobi-generate/

Validation

mkdir -p output/aliyun-aimiaobi-generate
for f in skills/ai/content/aliyun-aimiaobi-generate/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-aimiaobi-generate/validate.txt

Pass criteria: command exits 0 and output/aliyun-aimiaobi-generate/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/aliyun-aimiaobi-generate/.
• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

• Configure least-privilege Alibaba Cloud credentials before execution.
• Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
• If region is unclear, ask the user before running mutating operations.

References

• Sources: references/sources.md