
Alicloud Security Center Sas
- 260 installs
- 396 repo stars
- Updated July 18, 2026
- cinience/alicloud-skills
alicloud-security-center-sas is a Claude agent skill that operates Alibaba Cloud Security Center and Security Audit Service to assess vulnerabilities, misconfigurations, and compliance posture before release or during au
About
alicloud-security-center-sas is a cinience/alicloud-skills agent skill for teams running workloads on Alibaba Cloud who must assess security posture before release or during formal audits. The skill guides operation of Security Center and Security Audit Service (SAS) to surface vulnerabilities, misconfigurations, and compliance gaps across cloud assets instead of manual console clicking. Developers reach for it when pre-release security gates require cloud-native findings, when auditors request evidence of vulnerability management, or when ECS, RDS, and network resources need centralized risk review. It fits DevSecOps engineers and cloud security leads responsible for Alibaba Cloud accounts who need structured assessment workflows agents can follow. Output includes prioritized findings framing, compliance posture notes, and operational guidance aligned to Security Center and SAS capabilities so teams remediate misconfigurations before production traffic or audit deadlines.
- Security Center posture review
- SAS vulnerability and misconfig scans
- Compliance baseline checks
- Risk prioritization guidance
- Pre-release security sign-off
Alicloud Security Center Sas by the numbers
- 260 all-time installs (skills.sh)
- Ranked #668 of 2,203 Security skills by installs in the Skillselion catalog
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/cinience/alicloud-skills --skill alicloud-security-center-sasAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 260 |
|---|---|
| repo stars | ★ 396 |
| Last updated | July 18, 2026 |
| Repository | cinience/alicloud-skills ↗ |
How do you assess Alibaba Cloud security posture before release?
Operate Alibaba Cloud Security Center and Security Audit Service to assess vulnerabilities, misconfigurations, and compliance posture before release or during audits.
Who is it for?
DevSecOps engineers managing Alibaba Cloud accounts who need Security Center and SAS assessments before release or compliance audits.
Skip if: Non-Alibaba Cloud environments or application-only SAST reviews without Alibaba Security Center or SAS tooling.
When should I use this skill?
A developer needs to run Alibaba Cloud Security Center or Security Audit Service assessments for vulnerabilities, misconfigurations, or compliance before release.
What you get
Security Center and SAS vulnerability reports, misconfiguration findings, and compliance posture assessment notes.
- Vulnerability and misconfiguration assessment notes
- Compliance posture summary from Security Center and SAS
Files
Category: service
Security Center
Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for Security Center.
Workflow
1) Confirm region, resource identifiers, and desired action. 2) Discover API list and required parameters (see references). 3) Call API with SDK or OpenAPI Explorer. 4) Verify results with describe/list APIs.
AccessKey priority (must follow)
1) Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user. 2) Shared config file: ~/.alibabacloud/credentials
API discovery
- Product code:
Sas - Default API version:
2021-01-14 - Use OpenAPI metadata endpoints to list APIs and get schemas (see references).
High-frequency operation patterns
1) Inventory/list: prefer List* / Describe* APIs to get current resources. 2) Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations. 3) Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.
Minimal executable quickstart
Use metadata-first discovery before calling business APIs:
python scripts/list_openapi_meta_apis.pyOptional overrides:
python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>The script writes API inventory artifacts under the skill output directory.
Output policy
If you need to save responses or generated artifacts, write them under: output/alicloud-security-center-sas/
Validation
mkdir -p output/alicloud-security-center-sas
for f in skills/security/host/alicloud-security-center-sas/scripts/*.py; do
python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/alicloud-security-center-sas/validate.txtPass criteria: command exits 0 and output/alicloud-security-center-sas/validate.txt is generated.
Output And Evidence
- Save artifacts, command outputs, and API response summaries under
output/alicloud-security-center-sas/. - Include key parameters (region/resource id/time range) in evidence files for reproducibility.
Prerequisites
- Configure least-privilege Alibaba Cloud credentials before execution.
- Prefer environment variables:
ALICLOUD_ACCESS_KEY_ID,ALICLOUD_ACCESS_KEY_SECRET, optionalALICLOUD_REGION_ID. - If region is unclear, ask the user before running mutating operations.
References
- Sources:
references/sources.md
interface:
display_name: "Alibaba Cloud Security Center SAS"
short_description: "Host security operations workflows"
default_prompt: "Use $alicloud-security-center-sas to complete this security/host task on Alibaba Cloud."
Sources
- OpenAPI product page:
https://api.aliyun.com/product/Sas - API list (metadata):
https://api.aliyun.com/meta/v1/products/Sas/versions/2021-01-14/api-docs.json - API definition (single API):
https://api.aliyun.com/meta/v1/products/Sas/versions/2021-01-14/apis/{ApiName}/api.json
#!/usr/bin/env python3
"""Fetch OpenAPI metadata API list for one product/version and save to output/.
Env:
- OPENAPI_META_TIMEOUT (seconds, default: 20)
"""
from __future__ import annotations
import argparse
import json
import os
import pathlib
import urllib.request
DEFAULT_PRODUCT_CODE = "Sas"
DEFAULT_VERSION = "2021-01-14"
OUTPUT_DIR = pathlib.Path("output/alicloud-security-center-sas")
def fetch_json(url: str, timeout: int) -> dict:
req = urllib.request.Request(url, headers={"User-Agent": "codex-skill"})
with urllib.request.urlopen(req, timeout=timeout) as resp:
return json.loads(resp.read().decode("utf-8"))
def main() -> None:
parser = argparse.ArgumentParser()
parser.add_argument("--product-code", default=DEFAULT_PRODUCT_CODE)
parser.add_argument("--version", default=DEFAULT_VERSION)
parser.add_argument("--output-dir", default=str(OUTPUT_DIR))
args = parser.parse_args()
timeout = int(os.getenv("OPENAPI_META_TIMEOUT", "20"))
output_dir = pathlib.Path(args.output_dir)
output_dir.mkdir(parents=True, exist_ok=True)
url = (
f"https://api.aliyun.com/meta/v1/products/{args.product_code}"
f"/versions/{args.version}/api-docs.json"
)
payload = fetch_json(url, timeout)
raw_apis = payload.get("apis", {})
if isinstance(raw_apis, dict):
api_names = sorted(raw_apis.keys())
elif isinstance(raw_apis, list):
names = []
for item in raw_apis:
if isinstance(item, dict):
name = item.get("name") or item.get("apiName")
if name:
names.append(name)
elif isinstance(item, str):
names.append(item)
api_names = sorted(set(names))
else:
api_names = []
json_file = output_dir / f"{args.product_code}_{args.version}_api_docs.json"
md_file = output_dir / f"{args.product_code}_{args.version}_api_list.md"
json_file.write_text(json.dumps(payload, ensure_ascii=False, indent=2), encoding="utf-8")
md_lines = [
f"# {args.product_code} {args.version} API List",
"",
f"- Source: {url}",
f"- API count: {len(api_names)}",
"",
]
md_lines.extend([f"- `{name}`" for name in api_names])
md_file.write_text("\n".join(md_lines) + "\n", encoding="utf-8")
print(f"Saved: {json_file}")
print(f"Saved: {md_file}")
if __name__ == "__main__":
main()
Related skills
FAQ
What Alibaba Cloud services does alicloud-security-center-sas cover?
alicloud-security-center-sas operates Alibaba Cloud Security Center and Security Audit Service (SAS). The skill helps developers assess vulnerabilities, misconfigurations, and compliance posture on Alibaba Cloud workloads before production release or during formal security audits
When should teams use alicloud-security-center-sas?
Teams should use alicloud-security-center-sas before release when cloud security gates are required, or during audits when compliance evidence is needed. The skill structures Security Center and SAS workflows so misconfigurations and vulnerabilities are surfaced before go-live.