Aliyun Pts Manage
v1.0.0Use when managing Alibaba Cloud Performance Testing Service (PTS) via OpenAPI/SDK, including scene lifecycle operations, test start/stop control, report retr...
MIT-0
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
Name/description, SKILL.md, and included scripts all consistently implement Alibaba Cloud PTS management (list/start/stop, API discovery). The requested functionality (calling PTS OpenAPI) matches the code. However, the registry metadata declares no required environment variables or primary credential even though the skill needs cloud credentials to operate.
Instruction Scope
SKILL.md and the scripts stay within the stated scope: they call Alibaba Cloud APIs (official endpoints and api.aliyun.com metadata), perform read-only discovery before mutating operations, and write artifacts to output/aliyun-pts-manage/. There are no instructions to read unrelated local files or contact unknown endpoints.
Install Mechanism
This is an instruction-only skill with Python scripts and no install spec in the registry. The README recommends installing official alibabacloud Python SDK packages via pip (alibabacloud_pts20201020, alibabacloud_tea_openapi). No remote downloads from untrusted hosts or archive extraction are present in the package.
Credentials
The code and SKILL.md require Alibaba Cloud credentials (e.g., ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID) and accept shared credentials files. The registry metadata incorrectly lists zero required env vars/credentials. This omission is disproportionate because the skill cannot function without credentials and those credentials grant control over cloud resources — they should be declared and users advised to use least-privilege keys or roles.
Persistence & Privilege
The skill does not request always:true, does not attempt to modify other skills or system-wide settings, and uses only local output paths under output/aliyun-pts-manage/. Autonomous invocation is allowed by default (expected) and is not combined with other high-risk indicators.
What to consider before installing
This skill appears to implement legitimate Alibaba Cloud PTS operations and only talks to official Aliyun endpoints, but the package metadata fails to declare the cloud credentials it actually needs. Before installing or running: 1) Treat it as requiring ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET (and optionally ALICLOUD_REGION_ID or shared credentials file). 2) Use a least-privilege access key or temporary token (role/STS) scoped only to PTS APIs and test in a non-production account. 3) Run the scripts in an isolated virtualenv and review the small Python files yourself — they are short and only call Aliyun APIs and write to output/. 4) Be aware the output files may contain resource IDs, timestamps, and API responses; avoid storing full credentials in output. 5) Ask the publisher (or registry) to update the metadata to declare required.env / primary credential so the permission needs are explicit before enabling the skill.Like a lobster shell, security has layers — review code before you run it.
latest
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
SKILL.md
Category: service
Alibaba Cloud Performance Testing Service (PTS)
Purpose
Use Alibaba Cloud PTS OpenAPI to support:
- test scene inventory and inspection
- pressure test planning and lifecycle automation
- report and metrics retrieval for verification and troubleshooting
Prerequisites
- Configure least-privilege Alibaba Cloud credentials.
- Install Python SDKs (virtual environment recommended):
python3 -m venv .venv
. .venv/bin/activate
python -m pip install -U alibabacloud_pts20201020 alibabacloud_tea_openapi
- Prefer environment variables:
ALICLOUD_ACCESS_KEY_IDALICLOUD_ACCESS_KEY_SECRET- optional
ALICLOUD_REGION_ID
- Before mutating operations, run read-only API discovery and current-state checks.
AccessKey Priority
- Environment variables:
ALICLOUD_ACCESS_KEY_ID/ALICLOUD_ACCESS_KEY_SECRET/ALICLOUD_REGION_ID - Shared credentials file:
~/.alibabacloud/credentials
If region/environment is unclear, confirm with user before mutating operations.
Workflow
- Identify target region, test scene identifiers, and operation scope.
- Run API discovery to confirm API names and required parameters.
- Execute read-only APIs first (
List*/Get*/Describe*). - Execute mutating operations only after confirming rollback and change window.
- Save outputs and evidence to
output/aliyun-pts-manage/.
API Discovery
- Product code:
PTS - Default API version:
2020-10-20 - Metadata source:
https://api.aliyun.com/meta/v1/products/PTS/versions/2020-10-20/api-docs.json
Minimal Executable Quickstart
python skills/observability/pts/aliyun-pts-manage/scripts/list_openapi_meta_apis.py
Optional arguments:
python skills/observability/pts/aliyun-pts-manage/scripts/list_openapi_meta_apis.py \
--product-code PTS \
--version 2020-10-20 \
--output-dir output/aliyun-pts-manage
List scenes (read-only):
python skills/observability/pts/aliyun-pts-manage/scripts/list_pts_scenes.py \
--region cn-hangzhou \
--page-number 1 \
--page-size 10 \
--output output/aliyun-pts-manage/scenes.txt
Start one scene (mutating):
python skills/observability/pts/aliyun-pts-manage/scripts/start_pts_scene.py \
--region cn-hangzhou \
--scene-id <scene-id> \
--wait \
--output output/aliyun-pts-manage/start-result.json
Stop one scene (mutating):
python skills/observability/pts/aliyun-pts-manage/scripts/stop_pts_scene.py \
--region cn-hangzhou \
--scene-id <scene-id> \
--wait \
--output output/aliyun-pts-manage/stop-result.json
Common Operation Map
- Scene inventory:
ListPtsScene,GetPtsScene,ListOpenJMeterScenes,GetOpenJMeterScene - Scene lifecycle:
CreatePtsScene,SavePtsScene,ModifyPtsScene,DeletePtsScene,DeletePtsScenes - Test execution control:
StartPtsScene,StopPtsScene,StartTestingJMeterScene,StopTestingJMeterScene - Debug control:
StartDebugPtsScene,StopDebugPtsScene,StartDebuggingJMeterScene,StopDebuggingJMeterScene - Reports/metrics:
ListPtsReports,GetPtsReportDetails,GetPtsSceneRunningData,GetPtsSceneRunningStatus
See references/api_quick_map.md for grouped API lists.
Script Catalog
scripts/list_openapi_meta_apis.py: fetch metadata and generate API inventory files.scripts/list_pts_scenes.py: list PTS scenes with pagination.scripts/start_pts_scene.py: start a scene and optionally poll running status.scripts/stop_pts_scene.py: stop a scene and optionally poll until non-running.
Output Policy
Write generated files and execution evidence to:
output/aliyun-pts-manage/
Validation
mkdir -p output/aliyun-pts-manage
for f in skills/observability/pts/aliyun-pts-manage/scripts/*.py; do
python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-pts-manage/validate.txt
Pass criteria: command exits 0 and output/aliyun-pts-manage/validate.txt is generated.
Output And Evidence
- Save artifacts, command outputs, and API response summaries under
output/aliyun-pts-manage/. - Include key parameters (region/resource id/time range) in evidence files for reproducibility.
References
- Source list:
references/sources.md - API quick map:
references/api_quick_map.md - request/response templates:
references/templates.md
Files
10 totalSelect a file
Select a file to preview.
Comments
Loading comments…
