Security audit
Security checks for vulnerabilities and agentic risk
This Markdown-only skill helps answer Alibaba Cloud product questions from official public sources and does not show hidden execution, persistence, credential theft, or account-changing behavior.
Installers should expect this skill to guide agents toward public Alibaba Cloud websites and to produce bilingual product documentation summaries. Review generated API or CLI snippets before use, especially cloud resource creation or deletion examples, and provide real credentials only in trusted, user-directed workflows outside the skill itself.
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
### Output Guidelines
1. **Prioritize based on user query**: Focus on sections most relevant to the user's question
2. **Use tables for structured data**: Specifications, pricing tiers, parameters, comparisons
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
| **API Reference** | `https://www.alibabacloud.com/help/en/[product-code]/api-reference` | API documentation |
| **SDK Reference** | `https://www.alibabacloud.com/help/en/[product-code]/sdk-reference` | SDK guides |
| **Terraform Registry** | `https://registry.terraform.io/providers/aliyun/alicloud/latest/docs` | Terraform provider |
| **OpenAPI Explorer** | `https://api.alibabacloud.com/?product=[ProductCode]` | Interactive API testing |
### 3.9 常见问题文档来源 (FAQ Sources)
The instruction explicitly requires 'Bilingual headers' for section titles, which imposes a language/locale choice on every response regardless of the user's preferred language. This is a natural-language policy issue because the skill forces a specific output language format instead of offering or inferring user-preferred language.
This markdown file consistently presents user prompts, workflow guidance, and output examples primarily in Chinese, which can impose a specific language on users. Under the policy, locale or language constraints should either be optional or clearly justified; no such opt-in or justification appears here.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
No suspicious patterns detected.