Aliyun Bdrc Backup

Use when managing Alibaba Cloud Backup and Disaster Recovery Center (BDRC) via OpenAPI/SDK, including the user needs backup/disaster-recovery resource operat...

Security Scan

The skill's files and instructions match its stated purpose (discovering and using Alibaba Cloud BDRC OpenAPI metadata and guiding SDK calls); nothing in the bundle requests unrelated credentials, installs, or hidden endpoints — but pay attention before giving it live Alibaba Cloud credentials or allowing autonomous runs that could perform mutating operations.

Purpose & Capability

Name and description target Alibaba Cloud BDRC management. The bundle contains an API-metadata fetch script and prose instructing the agent to use Alibaba Cloud OpenAPI/SDKs to manage BDRC. That is coherent: the script helps discover APIs, while the SKILL.md instructs how to make calls (including mutating operations) using SDKs. Minor mismatch: the registry metadata lists no required env vars, but SKILL.md explicitly describes required Alibaba Cloud credentials and a shared config path (this is an instruction-level requirement rather than an install-time requirement).

Instruction Scope

SKILL.md directs discovery, SDK/OpenAPI calls, and saving evidence under output/. It instructs the agent to use environment credentials (~/.alibabacloud/credentials or env vars) when performing API calls and to verify results. The instructions do not tell the agent to read unrelated system files or contact unexpected endpoints; they do, however, include guidance to perform potentially mutating API operations. The skill does not implement those mutations itself — it relies on the agent and user-provided credentials, so operators should ensure the agent asks for confirmation before any destructive action.

Install Mechanism

No install spec; one small Python script is included and is human-readable. No external downloads or archive extraction are performed by the skill bundle, so installation risk is low.

Credentials

SKILL.md asks users to provide Alibaba Cloud credentials (ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID) or place credentials in ~/.alibabacloud/credentials. The registry metadata does not declare required env vars, but asking for these credentials is proportionate to the stated purpose. Because credentials would allow real cloud operations, the user should employ least-privilege credentials and avoid providing long-lived full-admin keys to this skill.

Persistence & Privilege

always is false and the skill is user-invocable; model invocation is permitted (default). This is normal for a skill that can call cloud APIs. Note: if you permit autonomous invocation and supply credentials, the agent could perform API calls without additional prompts — ensure you trust the agent's behavior or require confirmation before mutating operations.

Assessment

This skill is a helper for discovering Alibaba Cloud BDRC OpenAPI metadata and guiding SDK/API calls; the included script only fetches public API metadata from api.aliyun.com and writes it to output/. Before using it: (1) Do not supply production-wide or highly privileged Alibaba Cloud keys — create least-privilege keys or use a test account. (2) Confirm the agent will ask for explicit approval before performing any mutating API calls (create/update/delete). (3) If you only want metadata, you can run the provided script locally without giving the agent credentials. (4) Verify the contents of output/ before sharing them: evidence files may include resource identifiers and timestamps (not secrets). (5) If you want the registry metadata to reflect runtime requirements, consider updating required env vars to list the Alibaba Cloud credentials so their presence is explicit.

Category: service

Backup and Disaster Recovery Center

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for Backup and Disaster Recovery Center.

Workflow

1. Confirm region, resource identifiers, and desired action.
2. Discover API list and required parameters (see references).
3. Call API with SDK or OpenAPI Explorer.
4. Verify results with describe/list APIs.

AccessKey priority (must follow)

1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
2. Shared config file: ~/.alibabacloud/credentials

API discovery

• Product code: BDRC
• Default API version: 2023-08-08
• Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

1. Inventory/list: prefer List* / Describe* APIs to get current resources.
2. Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
3. Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/aliyun-bdrc-backup/

Validation

mkdir -p output/aliyun-bdrc-backup
for f in skills/backup/aliyun-bdrc-backup/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-bdrc-backup/validate.txt

Pass criteria: command exits 0 and output/aliyun-bdrc-backup/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/aliyun-bdrc-backup/.
• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

• Configure least-privilege Alibaba Cloud credentials before execution.
• Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
• If region is unclear, ask the user before running mutating operations.

References

• Sources: references/sources.md