Aliyun Fc Serverless Devs

Use when users need CLI-based FC quick start or Serverless Devs setup guidance.

Security Scan

The skill's instructions, files, and requested actions are consistent with a CLI quick-start for Alibaba Cloud Function Compute using Serverless Devs; it asks the user to provide Alibaba Cloud credentials and to run deployment commands but does not request unrelated credentials or perform hidden actions.

Purpose & Capability

Name/description match the contents: SKILL.md is a CLI quick-start for Alibaba Cloud FC and Serverless Devs. No unrelated binaries, config paths, or credentials are required by the metadata. Commands and configuration described (npm install, s config, s deploy, custom domain CNAME) are expected for this purpose.

Instruction Scope

Instructions include expected mutating actions (credential configuration, deploy/invoke/remove, DNS guidance for custom domains). The guide sensibly recommends confirming intent and least-privilege credentials. Minor issues: the document shows several example environment variable names (ALIBABA_CLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_ID, default_serverless_devs_key) which are inconsistent but not harmful. The instructions do not direct the agent to read unrelated system files or exfiltrate data; they do instruct creating output/ evidence files and running networked deploys (which is appropriate for the skill).

Install Mechanism

This is an instruction-only skill with no install spec and no code files — lowest install risk. It suggests using global npm install (with sudo) or npx as an alternative; that is typical for this tooling. No downloads from arbitrary URLs or archive extraction are present.

Credentials

The skill reasonably requires Alibaba Cloud credentials to operate (AK/SK, AccountID, region). The registry metadata declares no required env vars, but the SKILL.md recommends using environment variables; this is a minor inconsistency in metadata vs. instructions, not a security mismatch. No unrelated credentials or broad secrets are requested.

Persistence & Privilege

The skill does not request always:true and is user-invocable only. It does not modify other skills or system-wide agent settings. It will instruct the user/agent to run Alibaba Cloud CLI operations which is expected for this capability.

Scan Findings in Context

[no-findings] expected: The regex-based scanner found nothing to analyze because this is an instruction-only skill with no executable code files. That is expected; runtime actions are in SKILL.md.

Assessment

This skill appears to do what it says: guide CLI-based setup and deploys to Alibaba Cloud Function Compute using Serverless Devs. Before running anything, confirm the exact commands to be executed and the target region/resource names. Use least-privilege Alibaba Cloud credentials (create a short-lived/development AK/SK with only the permissions needed) rather than your root/owner keys. Prefer the npx (no-sudo) flow if you want to avoid global installs with sudo. Be aware deploy/remove commands are mutating and will create cloud resources and DNS changes if you follow the custom-domain steps. Review and sanitize any example environment variable usage so you do not accidentally leak credentials into shared shells or logs. The small inconsistencies in env var naming in the doc are not dangerous but double-check which variable names your environment and tooling expect.

Category: tool

Function Compute (FC 3.0) Serverless Devs

Goals

• Install and validate Serverless Devs.
• Configure credentials, initialize example project, deploy, invoke, and remove.
• Provide CLI flow with Python runtime example.

Quick Start Flow

1. Install Node.js (14+) and npm.
2. Install and validate Serverless Devs.
3. Configure credentials via guided setup.
4. Initialize example project and enter directory.
5. Deploy, invoke, and optionally remove.

Install Serverless Devs (npm)

Global install (requires sudo):

sudo npm install @serverless-devs/s -g
sudo s -v

No-sudo alternative (recommended in restricted environments):

npx -y @serverless-devs/s -v

Configure Credentials (guided)

sudo s config add

Choose Alibaba Cloud (alibaba), provide AccountID, AccessKeyID, AccessKeySecret, and set alias.

Configure Credentials (command)

Use CLI args to configure credential alias in one command (non-interactive):

s config add -a default --AccessKeyID <AK> --AccessKeySecret <SK> -f

If using environment variables, inject them into the command (example):

s config add -a default -kl AccessKeyID,AccessKeySecret -il ${ALIBABA_CLOUD_ACCESS_KEY_ID},${ALIBABA_CLOUD_ACCESS_KEY_SECRET} -f

Or use Serverless Devs convention JSON environment variable (example):

export default_serverless_devs_key='{\"AccountID\":\"<AccountID>\",\"AccessKeyID\":\"<AK>\",\"AccessKeySecret\":\"<SK>\"}'

Reference in s.yaml:

access: default_serverless_devs_key

Initialize Example (Python)

sudo s init start-fc3-python
cd start-fc3-python

Initialization creates s.yaml, code/, and readme.md; edit code/index.py for function logic.

Deploy, Invoke, and Remove

sudo s deploy
sudo s invoke -e "test"
sudo s remove

Custom Domain Binding (Avoid Default Domain Forced Download)

Note: FC default domain adds Content-Disposition: attachment, causing browser downloads. Use a custom domain to avoid this behavior.

Step 1: Configure CNAME for your domain

Configure DNS CNAME to FC public CNAME:

<account_id>.<region_id>.fc.aliyuncs.com

Example (Hangzhou region):

1629965279769872.cn-hangzhou.fc.aliyuncs.com

Note: if using apex domain (e.g. animus.run) and DNS provider does not support CNAME at apex, use ALIAS/ANAME records, or switch to a subdomain such as www.animus.run.

Step 2: Create custom domain in Serverless Devs

Option A: add fc3-domain resource in s.yaml:

resources:
  newsDomain:
    component: fc3-domain
    props:
      region: cn-hangzhou
      domainName: animus.run
      protocol: HTTP
      routeConfig:
        routes:
          - functionName: honnold-taipei101-news
            qualifier: LATEST
            methods:
              - GET
              - HEAD
            path: /*

region is example default; ask user when the best region is unclear.

Then deploy:

printf 'y\n' | npx -y @serverless-devs/s deploy

Option B: use Console (Advanced Features > Custom Domains) to create and route custom domain.

Common Errors

• DomainNameNotResolved: domain not resolved to correct FC CNAME.
• InvalidICPLicense: mainland China regions require ICP filing associated with Alibaba Cloud.

References

• See references/install_serverless_devs_and_docker.md for detailed official steps.

• HTTP trigger limitations and response header behavior (default domain enforces Content-Disposition: attachment)

  • https://www.alibabacloud.com/help/en/functioncompute/fc/user-guide/http-triggers-overview

• Custom domain binding and CNAME guidance

  • https://www.alibabacloud.com/help/en/functioncompute/fc/user-guide/configure-custom-domain-names

• Official source list:references/sources.md

Validation

mkdir -p output/aliyun-fc-serverless-devs
echo "validation_placeholder" > output/aliyun-fc-serverless-devs/validate.txt

Pass criteria: command exits 0 and output/aliyun-fc-serverless-devs/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/aliyun-fc-serverless-devs/.
• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

• Configure least-privilege Alibaba Cloud credentials before execution.
• Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
• If region is unclear, ask the user before running mutating operations.

Workflow

1. Confirm user intent, region, identifiers, and whether the operation is read-only or mutating.
2. Run one minimal read-only query first to verify connectivity and permissions.
3. Execute the target operation with explicit parameters and bounded scope.
4. Verify results and save output/evidence files.