Real Skill packageSource verifiedClawHub registry

alibabacloud-ak-leak-incident-response

Investigate an Alibaba Cloud AccessKey (AK) leakage incident and produce a read-only investigation report. Use when the user reports a leaked / exposed / stolen / compromised Alibaba Cloud AccessKey (AK / AK-SK / access key / secret key / RAM credential); receives an AK-leak alert, risk notification, SMS, or email; finds an AK/secret exposed on GitHub, Gitee, a public repo, logs, or config files; needs AK-leak incident response, post-theft investigation, or risk assessment; or wants to trace a leaked AK's maliciou…

Identity and source

Publisher attributionalibabacloud-skills-teamregistry owner unverified by skillvetai
Functional categoryDevOps, Cloud & Observabilityautomatically inferred · 67% rule confidence
Package forminstruction with code18 recorded files
Canonical sourceClawHub registryclawhub:sdk-team:alibabacloud-ak-leak-incident-response
Open canonical source ↗

Platform declarations

These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.

OpenClawnative officialProvenance: registry distribution

Independent structural checks

These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.

Claude Codepasses structure
Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 8/24/2026.claude/skills/alibabacloud-ak-leak-incident-response

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenAI Codexpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 8/24/2026.agents/skills/alibabacloud-ak-leak-incident-response

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenClawpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 8/24/2026skills/alibabacloud-ak-leak-incident-response

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

Installation and inspection

This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.

clawhub install @sdk-team/alibabacloud-ak-leak-incident-response
clawhub inspect @sdk-team/alibabacloud-ak-leak-incident-response --version 0.0.1

Security evidence

SkillVetAI static result: no findings detected

This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.

Status
completed
Coverage
full text content
Files
18 / 18 inspected as text
Checked
8/24/2026, 1:20:36 PM
Scanner
0.1.3
Policy
1.0.3
5 inferred permission indicators
  • shell execution — automatically inferred
  • network access — automatically inferred
  • filesystem write — automatically inferred
  • credential access — automatically inferred
  • external write action — automatically inferred
5 dependency and API indicators
  • pypi: requests >=2.20.0,<3.0.0
  • api: clawhub.ai
  • api: github.com
  • api: help.aliyun.com
  • api: www.alibabacloud.com
External clawhub result: suspicious

This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.

Evidence checked
8/24/2026, 3:49:21 AM
Release binding
Matches this record
  • vt: clean
  • skillspector: suspicious
  • llm: suspicious

Recorded files

The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.

Package content hashsha256:07ef222d7886b35d500fcc3f1e1c926e69b97bff69f3d3de0e40d8456a7e4755
Show up to 18 recorded paths
  • references/high_risk_api_list.md
  • references/internal_implementation.md
  • references/investigation_flow.md
  • references/module1_notification_check.md
  • references/module2_ak_lifecycle_lookup.md
  • references/module3_actiontrail_audit.md
  • references/module4_timeline_report.md
  • references/module5_remediation_best_practices.md
  • references/ram-policies.md
  • scripts/_cli.py
  • scripts/_constants.py
  • scripts/ak_leak_investigation.py
  • scripts/query_account_info.py
  • scripts/query_actiontrail_audit.py
  • scripts/query_notification.py
  • scripts/requirements.txt
  • skill-card.md
  • SKILL.md

Source changelog

alibabacloud-ak-leak-incident-response v0.0.1 — Initial release - Provides a secure, read-only workflow to investigate Alibaba Cloud AccessKey (AK) leak incidents. - Runs a single, orchestrated script to produce a mandatory six-section investigation report with risk assessment and remediation guidance. - Enforces strict read-only operation: never executes or generates mutating API calls; provides only manual remediation instructions. - Requires explicit scoping and user confirmation before execution, with masked credentials and complete provenance declaration. - Output follows a fixed format with a required banner, including a four-step remediation workflow and clear account/region details.