Aliyun Ice Manage

Use when managing Alibaba Cloud Intelligent Cloud Editing (ICE) media workflows via OpenAPI/SDK, including media processing jobs, template/workflow orchestra...

Security Scan

The skill is coherent with its stated purpose (managing Alibaba Cloud ICE via OpenAPI) and contains only a small metadata-fetch script and instructions; the main issue is an omission in the registry metadata (it doesn't declare the Alibaba credential environment variables the instructions expect).

Purpose & Capability

Name, description, SKILL.md, templates, and the included Python script all align: this is a helper for discovering and managing ICE OpenAPI endpoints and running ICE workflows. The script fetches metadata from api.aliyun.com and the SKILL.md documents ICE APIs and job operations as expected.

Instruction Scope

Runtime instructions are narrowly scoped: discover metadata, validate resources, submit/monitor jobs, and save evidence under output/aliyun-ice-manage/. They ask for reading standard Alibaba Cloud credential env vars or the shared credentials file and for saving request/response evidence locally. There are no instructions to read unrelated system data or to send collected evidence to external endpoints beyond Alibaba's official API metadata host.

Install Mechanism

No install spec (instruction-only) and the only code is a small Python script that performs an HTTP GET to a documented Alibaba metadata URL and writes files under output/. This is low-risk and proportionate to the stated purpose.

Credentials

The SKILL.md references environment variables (ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, ALICLOUD_REGION_ID and OPENAPI_META_TIMEOUT) and a shared config path (~/.alibabacloud/credentials), but the registry metadata lists no required env vars or primary credential. The skill legitimately needs Alibaba credentials for write operations, so the omission in the declared requirements is an inconsistency that should be corrected before trusting automated runs.

Persistence & Privilege

Skill does not request always:true, does not modify other skills or system-wide settings, and is user-invocable. Autonomous invocation is allowed (the platform default) but this skill does not request elevated persistent privileges.

Assessment

This skill appears to do what it claims: metadata discovery and management of Alibaba Cloud ICE. Before installing or allowing autonomous invocation: 1) Ensure you provide least-privilege Alibaba credentials (AccessKey/STS) and confirm the skill will only use them for the intended ICE APIs. 2) Note the SKILL.md expects env vars (ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID) and a shared config path (~/.alibabacloud/credentials) but these are not declared in the registry metadata — the omission should be fixed or you should manually verify credential handling. 3) Review what will be written to output/aliyun-ice-manage/ (request payloads and API responses) so sensitive data isn't unintentionally persisted. 4) If you plan to allow autonomous runs, consider limiting the credential scope (RAM permissions) and testing in a non-production account first.

Category: service

Intelligent Cloud Editing (ICE)

Validation

mkdir -p output/aliyun-ice-manage
python -m py_compile skills/media/ice/aliyun-ice-manage/scripts/list_openapi_meta_apis.py
echo "py_compile_ok" > output/aliyun-ice-manage/validate.txt

Pass criteria: command exits 0 and output/aliyun-ice-manage/validate.txt is generated.

Output And Evidence

• Save API inventory and operation evidence under output/aliyun-ice-manage/.
• Keep region, workflow IDs, job IDs, and request parameters in evidence files.

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage ICE resources. Prefer metadata-first API discovery before mutate operations.

Prerequisites

• Prepare least-privilege RAM AccessKey/STS credentials.
• Confirm target region, input/output OSS locations, and workflow scope before changes.
• Query current state with read-only APIs before invoking processing jobs.

Workflow

1. Confirm target workflow/template and media input/output locations.
2. Discover API names and required parameters via metadata and API Explorer.
3. Validate prerequisite resources using read-only APIs.
4. Submit and monitor processing jobs.
5. Save outputs and evidence under output/aliyun-ice-manage/.

AccessKey Priority

1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID.
2. Shared config file: ~/.alibabacloud/credentials.

If region is ambiguous, ask before write operations.

API Discovery

• Product code: ice
• Default API version: 2020-11-09
• Metadata source: https://api.aliyun.com/meta/v1/products/ice/versions/2020-11-09/api-docs.json

Minimal Executable Quickstart

python skills/media/ice/aliyun-ice-manage/scripts/list_openapi_meta_apis.py

Optional overrides:

python skills/media/ice/aliyun-ice-manage/scripts/list_openapi_meta_apis.py \
  --product-code ice \
  --version 2020-11-09 \
  --output-dir output/aliyun-ice-manage

Common Operation Mapping

• Media info and metadata: GetMediaInfo, SearchMedia, UpdateMediaMeta
• Workflow/template: CreateMediaWorkflow, UpdateMediaWorkflow, ListMediaWorkflowExecutions
• Job submission: SubmitMediaProducingJob, SubmitBatchMediaProducingJob, GetMediaProducingJob
• Editing/material: CreateSourceLocation, AddMedia, GetDefaultMaterial
• Task status/troubleshooting: GetTaskInfo, ListJobs, GetBatchMediaProducingJob

Output Policy

Write all generated files and execution evidence under: output/aliyun-ice-manage/

References

• Source list: references/sources.md
• Task templates: references/templates.md