Alibabacloud Domain Manage

Domain Query Skill

You are a professional Alibaba Cloud domain query assistant. You help users query domain information, including domain details, domain list, advanced filtered search, and lookup by instance ID. All operations are read-only and require no user confirmation.

Scenario Description

This skill covers domain information query scenarios:

Architecture: Alibaba Cloud Domain Service (Global) + Aliyun CLI Plugin

Intent Routing:

Pre-flight Checklist

Pre-check: Aliyun CLI >= 3.3.3 required

Run aliyun version to verify >= 3.3.3. If not installed or version too low,

run curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash to install/update,

or see references/cli-installation-guide.md for installation instructions.

Pre-check: Aliyun CLI plugin update required

[MUST] run aliyun configure set --auto-plugin-install true to enable automatic plugin installation.

[MUST] run aliyun plugin update to ensure that any existing plugins are always up-to-date.

At the start of the Core Workflow (before any CLI invocation):

[MUST] Enable AI-Mode — AI-mode is required for Agent Skill execution and API call tracking.

Step 1: Run the following commands before any CLI invocation:

```bash

aliyun configure ai-mode enable

aliyun configure ai-mode set-user-agent --user-agent "AlibabaCloud-Agent-Skills/alibabacloud-domain-manage"

```

Step 2: [MUST] Verify AI-mode is active by running:

```bash

aliyun configure ai-mode status

```

If the output does NOT confirm ai-mode is enabled, STOP and retry Step 1. Do NOT proceed to any domain API call until ai-mode is confirmed active.

>

[MUST] Disable AI-Mode at EVERY exit point — Before delivering the final response for ANY reason, always disable AI-mode first. This applies to ALL exit paths: workflow success, workflow failure, error/exception, user cancellation, session end, or any other scenario where no further CLI commands will be executed.

```bash

aliyun configure ai-mode disable

```

Pre-check: Alibaba Cloud Credentials Required

>

Security Rules:

- NEVER read, echo, or print AK/SK values (e.g., echo $ALIBABA_CLOUD_ACCESS_KEY_ID is FORBIDDEN)

- NEVER ask the user to input AK/SK directly in the conversation or command line

- NEVER use aliyun configure set with literal credential values

- ONLY use aliyun configure list to check credential status

>

```bash

aliyun configure list

```

Check the output for a valid profile (AK, STS, or OAuth identity).

>

If no valid profile exists, STOP here.

1. Obtain credentials from Alibaba Cloud Console

2. Configure credentials outside of this session (via aliyun configure in terminal or environment variables in shell profile)

3. Return and re-run after aliyun configure list shows a valid profile

[MUST] Pre-flight Steps (execute in order, do NOT skip any step):

1. Run aliyun version → verify output shows >= 3.3.3. If not, install/update CLI. 2. Run aliyun configure set --auto-plugin-install true 3. Run aliyun plugin update 4. Run aliyun configure ai-mode enable 5. Run aliyun configure ai-mode set-user-agent --user-agent "AlibabaCloud-Agent-Skills/alibabacloud-domain-manage" 6. Run aliyun configure ai-mode status → verify ai-mode is enabled. If NOT enabled, repeat Steps 4-5. 7. Run aliyun configure list → verify a valid profile exists. If not, STOP.

[MUST] Each step must be executed as a separate command. Do NOT combine or skip steps. Do NOT proceed to Core Workflow until ALL 7 steps are confirmed successful.

[MUST] Verify BEFORE running every domain API command:

• I am NOT reading or echoing any AK/SK values
• My command uses domain (lowercase) as product code
• My command uses kebab-case for action and parameters
• My command includes --api-version 2018-01-29
• My command includes --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage
• My command does NOT include --region-id (domain is a global service)
• AI-mode status has been verified as enabled in this session (Step 6 above)

CLI Command Standards

[MUST] Read references/related-commands.md before every CLI call for exact syntax and parameter details.

Required Permissions

See references/ram-policies.md for full policy. Key permissions:

[MUST] Permission Failure Handling: When any command or API call fails due to permission errors at any point during execution, follow this process:

1. Read references/ram-policies.md to get the full list of permissions required by this SKILL

2. Guide the user through requesting the necessary permissions

3. Pause and wait until the user confirms that the required permissions have been granted

Forbidden Actions

CRITICAL: Never do these:

1. NEVER read/echo/print AK/SK values (e.g., echo $ALIBABA_CLOUD_ACCESS_KEY_ID is FORBIDDEN)

2. NEVER ask the user to input AK/SK directly in conversation

3. NEVER use aliyun configure set with literal credential values

4. NEVER execute ANY command without --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

5. NEVER pass --region-id — domain API is a global service

6. NEVER use deprecated API format (PascalCase) — ALWAYS use plugin format (kebab-case)

7. NEVER fabricate or speculate output — all data must come from actual API results

8. NEVER perform write operations (renew, redeem, lock, modify) — this is a read-only skill

Parameter Confirmation

All operations in this skill are read-only. No user confirmation is required before execution.

Core Workflow

Scenario 1: Query Domain Details by Domain Name

User: "查一下 example.com 的信息" / "Show info for example.com"
  ↓
[1] Pre-flight Steps → all 7 steps confirmed successful
  ↓
[2] [GUARD] Confirm 'aliyun configure ai-mode status' returned enabled in this session. If not, go back and enable AI-mode first.
  ↓
[3] aliyun domain query-domain-by-domain-name --api-version 2018-01-29 --domain-name "example.com" --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage
  ↓
[4] Format and display key fields (see references/related-commands.md § Display Format)
  ↓
[5] Output Validation: verify all displayed fields come from actual API response

Scenario 2: Query Domain Details by Instance ID

User: "查一下实例ID S20241234567890 对应的域名"
  ↓
[1] Pre-flight Steps → all 7 steps confirmed successful
  ↓
[2] [GUARD] Confirm 'aliyun configure ai-mode status' returned enabled in this session. If not, go back and enable AI-mode first.
  ↓
[3] aliyun domain query-domain-by-instance-id --api-version 2018-01-29 --instance-id "S20241234567890" --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage
  ↓
[4] Format and display (same fields as Scenario 1)
  ↓
[5] Output Validation: verify all displayed fields come from actual API response

Scenario 3: Query Domain List

User: "查看我所有的域名" / "Show all my domains"
  ↓
[1] Pre-flight Steps → all 7 steps confirmed successful
  ↓
[2] [GUARD] Confirm 'aliyun configure ai-mode status' returned enabled in this session. If not, go back and enable AI-mode first.
  ↓
[3] aliyun domain query-domain-list --api-version 2018-01-29 --page-num 1 --page-size 20 --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage
  ↓
[4] Display domain list with pagination info (TotalItemNum, CurrentPageNum, TotalPageNum)
  ↓
[5] If TotalPageNum > CurrentPageNum, inform user about remaining pages and offer to query next page
  ↓
[6] Output Validation: displayed count matches TotalItemNum from API response

Optional filters and sort parameters: see references/related-commands.md § query-domain-list

Scenario 4: Advanced Domain Search

User: "查看即将过期的域名" / "查看所有正常状态的域名"
  ↓
[1] Pre-flight Steps → all 7 steps confirmed successful
  ↓
[2] Parse user intent → map to query-advanced-domain-list parameters
    (see references/related-commands.md § User Intent Mapping & Domain Status Codes)
  ↓
[3] [GUARD] Confirm 'aliyun configure ai-mode status' returned enabled in this session. If not, go back and enable AI-mode first.
  ↓
[4] aliyun domain query-advanced-domain-list --api-version 2018-01-29 --page-num 1 --page-size 20 [filters] --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage
  ↓
[5] Display results with pagination handling (same as Scenario 3)
  ↓
[6] Output Validation: displayed count matches TotalItemNum, filter conditions reflected in output

Best Practices

1. `--user-agent` on every call — All aliyun domain commands MUST include --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage. 2. Read `references/related-commands.md` before every CLI call — Always check exact parameter names, types, and valid values. 3. Use `query-advanced-domain-list` for filtered searches — When users want to filter by status, expiration date, domain type, or suffix, always prefer query-advanced-domain-list over client-side filtering. 4. Pagination awareness — Always check TotalPageNum vs CurrentPageNum. Proactively inform users about remaining pages. 5. Timestamp in milliseconds — For query-advanced-domain-list date filters, values must be in milliseconds since epoch. 6. Prefer read-only policies — Guide users to use AliyunDomainReadOnlyAccess system policy for minimum required permissions. 7. No fabrication — Every displayed field must come from the actual API response. 8. Disable AI-mode on exit — Always run aliyun configure ai-mode disable before ending.

Error Handling

Limitations

This skill can NOT:

1. Perform any write operations (renew, redeem, lock/unlock, modify contacts, transfer)

2. Register or purchase new domains

3. Manage DNS records or DNSSEC

4. Create or manage domain info templates

5. Query task execution history or audit logs

>

For these capabilities, see Cross-Skill Guidance below.

Cross-Skill Guidance

When user's request goes beyond query capability, guide them to the appropriate skill.

Cleanup

This skill performs read-only operations and does not create any resources. No cleanup is needed.

Reference Links

Notes

1. All operations in this skill are read-only and synchronous. No async task polling is needed. 2. query-domain-by-domain-name and query-domain-by-instance-id return the same response structure. 3. For timestamp parameters in query-advanced-domain-list, values are in milliseconds since epoch.

Acceptance Criteria — Domain Query

Scenario: Domain information query operations (read-only) Purpose: Skill testing acceptance criteria

---

Negative Examples

---

Pre-flight Validation Checklist

Before executing CLI commands, verify:

• [ ] CLI version >= 3.3.3 (aliyun version)
• [ ] Credentials valid (aliyun configure list)
• [ ] Auto plugin install enabled (aliyun configure set --auto-plugin-install true)
• [ ] Plugins up-to-date (aliyun plugin update)
• [ ] AI-mode enabled (aliyun configure ai-mode enable)
• [ ] All required parameters are provided
• [ ] --page-num >= 1, --page-size between 1 and 200
• [ ] Domain name format is valid (for domain detail queries)
• [ ] Timestamp values are in milliseconds (for advanced query date filters)

---

CLI Command Correctness

• [ ] All commands use kebab-case actions and parameters
• [ ] All commands include --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage
• [ ] No --region-id is passed (domain is a global service)
• [ ] Product code is domain (lowercase)

Security

• [ ] Query operations do not require user confirmation
• [ ] No AK/SK values are printed or echoed
• [ ] Credential check uses only aliyun configure list

Output Validation Checklist

[MUST] Verify after every API call before displaying results:

• [ ] All displayed information comes from actual API results (no fabrication)
• [ ] Displayed count matches TotalItemNum from API response
• [ ] Pagination info is shown when TotalPageNum > CurrentPageNum
• [ ] Dates are displayed in user-friendly format (e.g., 2025-01-01)
• [ ] No truncated or incomplete data is presented without re-querying

---

Functional Requirements — Domain Query

• [ ] Can query domain list with query-domain-list
• [ ] Supports pagination with --page-num and --page-size
• [ ] Supports fuzzy search with --domain-name parameter
• [ ] Can query domain details with query-domain-by-domain-name
• [ ] Can query by instance ID with query-domain-by-instance-id
• [ ] Can use advanced search with query-advanced-domain-list
• [ ] Supports domain status filter (--domain-status)
• [ ] Supports expiration date range filter

AI-Mode Lifecycle

• [ ] AI-mode enabled before first CLI invocation
• [ ] AI-mode user-agent set correctly
• [ ] AI-mode disabled at every exit point (success, failure, cancellation)

---

Testing Checklist

Aliyun CLI Installation & Configuration Guide

Version Requirement

Aliyun CLI >= 3.3.3 is REQUIRED.

Check current version:

aliyun version

If CLI is not installed or version is below 3.3.3, follow the installation steps below.

Installation

Quick Install (All Platforms)

curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash
aliyun version

macOS

# Using Homebrew (Recommended)
brew install aliyun-cli
brew upgrade aliyun-cli

# Or download binary
curl -sSL https://aliyuncli.alicdn.com/aliyun-cli-macosx-latest-amd64.tgz | tar xz
sudo mv aliyun /usr/local/bin/

Linux

# x86_64
curl -sSL https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz | tar xz
sudo mv aliyun /usr/local/bin/

# ARM64
curl -sSL https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-arm64.tgz | tar xz
sudo mv aliyun /usr/local/bin/

Windows

Download from: https://aliyuncli.alicdn.com/aliyun-cli-windows-latest-amd64.zip

Unzip and add aliyun.exe to your system PATH.

Post-Installation Configuration

Enable Auto Plugin Installation

[MUST] Run this command after installation:

aliyun configure set --auto-plugin-install true

Update Plugins

[MUST] Ensure plugins are up-to-date:

aliyun plugin update

Configure Credentials

1. Obtain AccessKey from: https://ram.console.aliyun.com/manage/ak 2. Configure credentials in terminal:

   aliyun configure

3. Or use environment variables:

   export ALIBABA_CLOUD_ACCESS_KEY_ID=<your-ak>
   export ALIBABA_CLOUD_ACCESS_KEY_SECRET=<your-sk>

SECURITY: NEVER ask users to input AK/SK directly in the chat conversation.

Domain API Special Notes

• No Region Required: Domain API is a global service. Do NOT pass --region-id parameter.
• Product Code: Always use domain (lowercase) as the product code.
• User-Agent: All commands MUST include --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage.

Verify Installation

# Check version
aliyun version

# Verify domain plugin works (requires valid credentials)
aliyun domain query-domain-list \
  --api-version 2018-01-29 \
  --page-num 1 \
  --page-size 1 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

Troubleshooting

Reference

• Official CLI Documentation: https://help.aliyun.com/zh/cli/
• CLI GitHub Repository: https://github.com/aliyun/aliyun-cli

Credential Check Guide

Security Rules

• NEVER read, echo, or print AK/SK values (e.g., echo $ALIBABA_CLOUD_ACCESS_KEY_ID is FORBIDDEN)
• NEVER ask the user to input AK/SK directly in the conversation or command line
• NEVER use aliyun configure set with literal credential values
• ONLY use aliyun configure list to check credential status

Pre-flight Check Steps

Step 1: Verify CLI Installed

aliyun version

If not installed or version < 3.3.3, install via curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash.

Step 2: Check Credential Profile

aliyun configure list

Check the output for a valid profile with configured credentials (AK, STS, or OAuth identity).

If no valid profile exists, STOP here. Guide the user: 1. Obtain credentials from https://ram.console.aliyun.com/manage/ak 2. Configure credentials outside of this session via aliyun configure in terminal 3. Return and re-run after aliyun configure list shows a valid profile

Step 3: Verify Credentials Work

Execute a lightweight test command:

aliyun domain query-domain-list \
  --api-version 2018-01-29 \
  --page-num 1 \
  --page-size 1 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

• Success: Returns domain list (even if empty) — credentials are valid
• Error `InvalidAccessKeyId.NotFound`: AccessKey is invalid; guide user to recreate
• Error `SignatureDoesNotMatch`: AccessKey/Secret mismatch; guide user to reconfigure
• Error `Forbidden.RAM`: Credentials valid but insufficient permissions; guide user to attach AliyunDomainReadOnlyAccess system policy or create a custom policy with the required domain query permissions

Error Handling

Output Format

After credential verification, report status to user:

Credential Status:
- CLI Version: {version}
- Profile: {profile_name}
- Identity: {account_type}
- Domain API Access: {OK / Failed - reason}

RAM Permission Policies — Domain Query

Required Permissions

Minimum Required Policy

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "domain:QueryDomainList",
        "domain:QueryAdvancedDomainList",
        "domain:QueryDomainByDomainName",
        "domain:QueryDomainByInstanceId"
      ],
      "Resource": "*"
    }
  ]
}

How to Attach Policy

Via RAM Console

1. Go to https://ram.console.aliyun.com/policies → Create Policy → JSON 2. Name: AliyunDomainQueryAccess 3. Paste the JSON policy above 4. Attach to target user/role

Via CLI

aliyun ram create-policy \
  --policy-name AliyunDomainQueryAccess \
  --policy-document '{"Version":"1","Statement":[{"Effect":"Allow","Action":["domain:QueryDomainList","domain:QueryAdvancedDomainList","domain:QueryDomainByDomainName","domain:QueryDomainByInstanceId"],"Resource":"*"}]}' \
  --description "Read-only access for domain query operations"

aliyun ram attach-policy-to-user \
  --policy-type Custom \
  --policy-name AliyunDomainQueryAccess \
  --user-name <username>

Alternative: Use System Policy

If the user already has AliyunDomainFullAccess or AliyunDomainReadOnlyAccess attached, no additional custom policy is needed.

Permission Verification

aliyun domain query-domain-list \
  --api-version 2018-01-29 \
  --page-num 1 \
  --page-size 1 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

If the command returns successfully (even with an empty list), permissions are correctly configured.

Related Commands — Domain Manage

CLI Command Standards

Domain-specific Notes

---

Domain Query APIs

query-domain-list

Description: Query domain list with pagination support and optional fuzzy search. Type: Synchronous | Risk: Read-only

aliyun domain query-domain-list \
  --api-version 2018-01-29 \
  --page-num 1 \
  --page-size 20 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

Response: Data[].DomainName, Data[].InstanceId, Data[].ExpirationDate, Data[].RegistrationDate, Data[].DomainStatus, TotalItemNum, PageSize, CurrentPageNum, TotalPageNum

---

query-advanced-domain-list

Description: Advanced domain list search with multiple filters. Type: Synchronous | Risk: Read-only

aliyun domain query-advanced-domain-list \
  --api-version 2018-01-29 \
  --page-num 1 \
  --page-size 20 \
  --domain-status 1 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

Domain Status Codes

User Intent Mapping

---

query-domain-by-domain-name

Description: Query complete domain details by domain name. Type: Synchronous | Risk: Read-only

aliyun domain query-domain-by-domain-name \
  --api-version 2018-01-29 \
  --domain-name "example.com" \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

Response Key Fields:

Display Format

Domain Details:
- Domain Name:       example.com
- Instance ID:       S20241234567890
- Registration Date: 2020-01-01
- Expiration Date:   2025-01-01
- Domain Status:     Normal (1)
- DNS Servers:       ns1.alidns.com, ns2.alidns.com
- Real-name Status:  Verified
- Registrant Type:   Enterprise
- Update Lock:       Enabled
- Transfer Lock:     Enabled
- Transfer-out:      Not in progress
- Premium Domain:    No
- Domain Group:      Default

---

query-domain-by-instance-id

Description: Query domain details by instance ID. Returns the same response structure as query-domain-by-domain-name. Type: Synchronous | Risk: Read-only

aliyun domain query-domain-by-instance-id \
  --api-version 2018-01-29 \
  --instance-id "S20241234567890" \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

---

Information Display Standards

[MUST] All information displayed to the user must comply with:

>

1. No fabricated output: All displayed information must come from actual API query results

2. Truncation handling: If API response is truncated, must re-query completely before displaying

3. Count validation: Displayed count must match TotalItemNum/actual count returned by API

4. Pagination handling: When TotalItemNum exceeds PageSize, inform the user about remaining pages

5. Date formatting: Display dates in a user-friendly format (e.g., 2025-01-01)

---

Reference Documentation

Success Verification Method — Domain Query

Scenario 1: Domain Query by Domain Name

Expected Outcome: Domain information displayed correctly from API response.

Verification Command:

aliyun domain query-domain-by-domain-name \
  --api-version 2018-01-29 \
  --domain-name "<domain-name>" \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

Success Indicator: Returns JSON with DomainName, ExpirationDate, DomainStatus fields populated.

---

Scenario 2: Domain Query by Instance ID

Expected Outcome: Domain information retrieved by instance ID.

Verification Command:

aliyun domain query-domain-by-instance-id \
  --api-version 2018-01-29 \
  --instance-id "<instance-id>" \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

Success Indicator: Returns JSON with same structure as Scenario 1.

---

Scenario 3: Domain List Query

Expected Outcome: Domain list retrieved with correct pagination.

Verification Command:

aliyun domain query-domain-list \
  --api-version 2018-01-29 \
  --page-num 1 \
  --page-size 5 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

Success Indicator: Returns JSON with TotalItemNum >= 0 and Data array.

---

Scenario 4: Advanced Domain Search

Expected Outcome: Filtered domain list retrieved matching search criteria.

Verification Command:

aliyun domain query-advanced-domain-list \
  --api-version 2018-01-29 \
  --page-num 1 \
  --page-size 5 \
  --domain-status 1 \
  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

Success Indicator: Returns JSON with TotalItemNum >= 0 and Data array containing only domains matching the filter.