alibabacloud-sas-overviewAlibaba Cloud Security Center (SAS) Overview Data Query Skill. Retrieves security score, asset status, risk governance, asset risk trends, and billing info....
Install via ClawdBot CLI:
clawdbot install sdk-team/alibabacloud-sas-overviewGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
eval (Accesses system directories or attempts privilege escalation
sudo mvCalls external URL not in known-safe list
https://ram.console.aliyun.com/manage/akAI Analysis
The skill definition shows no evidence of credential harvesting, data exfiltration, or hidden malicious behavior. The external URL referenced is the legitimate Alibaba Cloud RAM console for credential management, consistent with the skill's purpose. The primary risk is the user's responsibility to securely manage their own cloud credentials outside the skill's execution context.
Generated May 7, 2026
Security teams can query the overall security score, fixed vulnerabilities, baseline risks, and handled alerts daily to track the security posture of their Alibaba Cloud assets across multiple regions without needing to log into the console.
Automate retrieval of asset risk trends and billing information to generate monthly security audit reports, helping organizations demonstrate compliance and manage costs.
During a security incident, quickly query risk governance data including AI risk, CSPM issues, and WAF blocks to assess the impact and prioritize remediation efforts.
For enterprises with assets in both cn-shanghai and ap-southeast-1, this skill aggregates data from both regions, providing a unified view of vulnerabilities, baseline risks, and alerts.
Finance and operations teams can retrieve billing and subscription details (e.g., post-pay switches, subscription validity) to track spending and plan renewals.
Offer a subscription service that provides daily or weekly security overview reports via this skill, generating recurring revenue from SMBs needing continuous cloud security monitoring.
Integrate this skill into a broader MSSP offering, allowing providers to monitor multiple client accounts' SAS overview data from a single interface, charging per client per month.
Package the skill as part of a compliance automation solution that generates audit-ready reports on security posture and risk trends, sold to enterprises needing to meet regulatory standards.
💬 Integration Tip
Ensure the Aliyun CLI version is >= 3.3.1 and credentials are configured via environment variables or aliyun configure before using the skill.
Scored Jul 2, 2026
Audited Apr 16, 2026 · audit v1.0
Parse, search, and analyze application logs across formats. Use when debugging from log files, setting up structured logging, analyzing error patterns, correlating events across services, parsing stack traces, or monitoring log output in real time.
Control remote Windows machines via SSH. Use when executing commands on Windows, checking GPU status (nvidia-smi), running scripts, or managing remote Windows systems. Triggers on "run on Windows", "execute on remote", "check GPU", "nvidia-smi", "远程执行", "Windows 命令".
Perform reverse lookup of gTLD domains hosted on a specified nameserver with optional filters by TLD and domain prefix length.
Configure OpenClaw installations with optimized settings, channel setup, security hardening, and production recommendations.
Essential curl commands for HTTP requests, API testing, and file transfers.
Connect to remote desktops via RDP, VNC, and SSH X11 with secure tunneling and troubleshooting.