Now liveThe Skillselion MCP - thousands of ranked skills, loaded into your agent mid-task. No install.Get it →
cinience avatar

Alicloud Security Center Sas

  • 260 installs
  • 396 repo stars
  • Updated July 18, 2026
  • cinience/alicloud-skills

alicloud-security-center-sas is a Claude agent skill that operates Alibaba Cloud Security Center and Security Audit Service to assess vulnerabilities, misconfigurations, and compliance posture before release or during au

About

alicloud-security-center-sas is a cinience/alicloud-skills agent skill for teams running workloads on Alibaba Cloud who must assess security posture before release or during formal audits. The skill guides operation of Security Center and Security Audit Service (SAS) to surface vulnerabilities, misconfigurations, and compliance gaps across cloud assets instead of manual console clicking. Developers reach for it when pre-release security gates require cloud-native findings, when auditors request evidence of vulnerability management, or when ECS, RDS, and network resources need centralized risk review. It fits DevSecOps engineers and cloud security leads responsible for Alibaba Cloud accounts who need structured assessment workflows agents can follow. Output includes prioritized findings framing, compliance posture notes, and operational guidance aligned to Security Center and SAS capabilities so teams remediate misconfigurations before production traffic or audit deadlines.

  • Security Center posture review
  • SAS vulnerability and misconfig scans
  • Compliance baseline checks
  • Risk prioritization guidance
  • Pre-release security sign-off

Alicloud Security Center Sas by the numbers

  • 260 all-time installs (skills.sh)
  • Ranked #668 of 2,203 Security skills by installs in the Skillselion catalog
  • Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/cinience/alicloud-skills --skill alicloud-security-center-sas

Add your badge

Show developers this skill is listed on Skillselion. Paste this into your README.

Listed on Skillselion
Installs260
repo stars396
Last updatedJuly 18, 2026
Repositorycinience/alicloud-skills

How do you assess Alibaba Cloud security posture before release?

Operate Alibaba Cloud Security Center and Security Audit Service to assess vulnerabilities, misconfigurations, and compliance posture before release or during audits.

Who is it for?

DevSecOps engineers managing Alibaba Cloud accounts who need Security Center and SAS assessments before release or compliance audits.

Skip if: Non-Alibaba Cloud environments or application-only SAST reviews without Alibaba Security Center or SAS tooling.

When should I use this skill?

A developer needs to run Alibaba Cloud Security Center or Security Audit Service assessments for vulnerabilities, misconfigurations, or compliance before release.

What you get

Security Center and SAS vulnerability reports, misconfiguration findings, and compliance posture assessment notes.

  • Vulnerability and misconfiguration assessment notes
  • Compliance posture summary from Security Center and SAS

Files

SKILL.mdMarkdownGitHub ↗

Category: service

Security Center

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for Security Center.

Workflow

1) Confirm region, resource identifiers, and desired action. 2) Discover API list and required parameters (see references). 3) Call API with SDK or OpenAPI Explorer. 4) Verify results with describe/list APIs.

AccessKey priority (must follow)

1) Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user. 2) Shared config file: ~/.alibabacloud/credentials

API discovery

  • Product code: Sas
  • Default API version: 2021-01-14
  • Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

1) Inventory/list: prefer List* / Describe* APIs to get current resources. 2) Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations. 3) Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/alicloud-security-center-sas/

Validation

mkdir -p output/alicloud-security-center-sas
for f in skills/security/host/alicloud-security-center-sas/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/alicloud-security-center-sas/validate.txt

Pass criteria: command exits 0 and output/alicloud-security-center-sas/validate.txt is generated.

Output And Evidence

  • Save artifacts, command outputs, and API response summaries under output/alicloud-security-center-sas/.
  • Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

  • Configure least-privilege Alibaba Cloud credentials before execution.
  • Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
  • If region is unclear, ask the user before running mutating operations.

References

  • Sources: references/sources.md

Related skills

FAQ

What Alibaba Cloud services does alicloud-security-center-sas cover?

alicloud-security-center-sas operates Alibaba Cloud Security Center and Security Audit Service (SAS). The skill helps developers assess vulnerabilities, misconfigurations, and compliance posture on Alibaba Cloud workloads before production release or during formal security audits

When should teams use alicloud-security-center-sas?

Teams should use alicloud-security-center-sas before release when cloud security gates are required, or during audits when compliance evidence is needed. The skill structures Security Center and SAS workflows so misconfigurations and vulnerabilities are surfaced before go-live.

Securityauditappseccompliance

This week in AI coding

Five minutes, every Monday - the tools, releases and tactics for developers.

unsubscribe anytime.