Alicloud Security Id Verification Cloudauth
- 261 installs
- 396 repo stars
- Updated July 18, 2026
- cinience/alicloud-skills
alicloud-security-id-verification-cloudauth is an AI agent skill that manages Alibaba Cloud ID Verification (Cloudauth) via OpenAPI and SDK for developers who must add government-ID KYC to signup or checkout flows.
About
alicloud-security-id-verification-cloudauth is an agent skill from cinience/alicloud-skills for Alibaba Cloud ID Verification (Cloudauth). The skill (version 1.0.0) guides metadata-first OpenAPI discovery for product code Cloudauth at API version 2022-11-25, then List, Describe, Create, Update, and Query RPC calls through official SDKs or OpenAPI Explorer. A bundled Python script, list_openapi_meta_apis.py, inventories available APIs and writes artifacts under output/aliyun-cloudauth-verify/. Credential handling follows ALIBABACLOUD_ACCESS_KEY_ID and ALIBABACLOUD_ACCESS_KEY_SECRET with optional ALIBABACLOUD_REGION_ID, falling back to ~/.alibabacloud/credentials. Reach for this skill when implementing KYC in regulated SaaS or API products on Alibaba Cloud, or when troubleshooting Cloudauth configuration and verification status.
- CloudAuth API integration steps
- Government ID verification flows
- KYC and signup fraud reduction
- Callback and result handling patterns
- Compliance-oriented identity checks
Alicloud Security Id Verification Cloudauth by the numbers
- 261 all-time installs (skills.sh)
- Ranked #665 of 2,203 Security skills by installs in the Skillselion catalog
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/cinience/alicloud-skills --skill alicloud-security-id-verification-cloudauthAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 261 |
|---|---|
| repo stars | ★ 396 |
| Last updated | July 18, 2026 |
| Repository | cinience/alicloud-skills ↗ |
How do you integrate Alibaba CloudAuth KYC APIs?
Integrate Alibaba CloudAuth identity verification into signup, KYC, or checkout flows that must validate government IDs and reduce fraud before regulated features launch.
Who is it for?
Backend engineers on Alibaba Cloud who must add government-ID verification to signup, checkout, or regulated KYC workflows.
Skip if: Teams on AWS, Azure, or GCP identity stacks, or projects that only need generic fraud scoring without Alibaba CloudAuth.
When should I use this skill?
The user mentions Alibaba CloudAuth, Cloudauth OpenAPI, government-ID KYC, identity verification configuration, or troubleshooting verification job status on Alibaba Cloud.
What you get
Cloudauth API inventory files, SDK or OpenAPI call outputs, verification status query results, and reproducible evidence under output/aliyun-cloudauth-verify/.
- Cloudauth OpenAPI inventory artifacts
- API response and troubleshooting evidence files
- py_compile validation output under output/aliyun-cloudauth-verify/
By the numbers
- Targets Cloudauth OpenAPI version 2022-11-25
- Bundles 1 Python metadata-discovery script (list_openapi_meta_apis.py)
- Documents 3 high-frequency Cloudauth API operation patterns
Files
Category: service
ID Verification (Cloudauth)
Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for ID Verification.
Workflow
1) Confirm region, resource identifiers, and desired action. 2) Discover API list and required parameters (see references). 3) Call API with SDK or OpenAPI Explorer. 4) Verify results with describe/list APIs.
AccessKey priority (must follow)
1) Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user. 2) Shared config file: ~/.alibabacloud/credentials
API discovery
- Product code:
Cloudauth - Default API version:
2022-11-25 - Use OpenAPI metadata endpoints to list APIs and get schemas (see references).
High-frequency operation patterns
1) Inventory/list: prefer List* / Describe* APIs to get current resources. 2) Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations. 3) Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.
Minimal executable quickstart
Use metadata-first discovery before calling business APIs:
python scripts/list_openapi_meta_apis.pyOptional overrides:
python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>The script writes API inventory artifacts under the skill output directory.
Output policy
If you need to save responses or generated artifacts, write them under: output/alicloud-security-id-verification-cloudauth/
Validation
mkdir -p output/alicloud-security-id-verification-cloudauth
for f in skills/security/identity/alicloud-security-id-verification-cloudauth/scripts/*.py; do
python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/alicloud-security-id-verification-cloudauth/validate.txtPass criteria: command exits 0 and output/alicloud-security-id-verification-cloudauth/validate.txt is generated.
Output And Evidence
- Save artifacts, command outputs, and API response summaries under
output/alicloud-security-id-verification-cloudauth/. - Include key parameters (region/resource id/time range) in evidence files for reproducibility.
Prerequisites
- Configure least-privilege Alibaba Cloud credentials before execution.
- Prefer environment variables:
ALICLOUD_ACCESS_KEY_ID,ALICLOUD_ACCESS_KEY_SECRET, optionalALICLOUD_REGION_ID. - If region is unclear, ask the user before running mutating operations.
References
- Sources:
references/sources.md
interface:
display_name: "Alibaba Cloud Security Id Verification Cloudauth"
short_description: "Identity verification service workflows"
default_prompt: "Use $alicloud-security-id-verification-cloudauth to complete this security/identity task on Alibaba Cloud."
Sources
- OpenAPI product page:
https://api.aliyun.com/product/Cloudauth - API list (metadata):
https://api.aliyun.com/meta/v1/products/Cloudauth/versions/2022-11-25/api-docs.json - API definition (single API):
https://api.aliyun.com/meta/v1/products/Cloudauth/versions/2022-11-25/apis/{ApiName}/api.json
#!/usr/bin/env python3
"""Fetch OpenAPI metadata API list for one product/version and save to output/.
Env:
- OPENAPI_META_TIMEOUT (seconds, default: 20)
"""
from __future__ import annotations
import argparse
import json
import os
import pathlib
import urllib.request
DEFAULT_PRODUCT_CODE = "Cloudauth"
DEFAULT_VERSION = "2022-11-25"
OUTPUT_DIR = pathlib.Path("output/alicloud-security-id-verification-cloudauth")
def fetch_json(url: str, timeout: int) -> dict:
req = urllib.request.Request(url, headers={"User-Agent": "codex-skill"})
with urllib.request.urlopen(req, timeout=timeout) as resp:
return json.loads(resp.read().decode("utf-8"))
def main() -> None:
parser = argparse.ArgumentParser()
parser.add_argument("--product-code", default=DEFAULT_PRODUCT_CODE)
parser.add_argument("--version", default=DEFAULT_VERSION)
parser.add_argument("--output-dir", default=str(OUTPUT_DIR))
args = parser.parse_args()
timeout = int(os.getenv("OPENAPI_META_TIMEOUT", "20"))
output_dir = pathlib.Path(args.output_dir)
output_dir.mkdir(parents=True, exist_ok=True)
url = (
f"https://api.aliyun.com/meta/v1/products/{args.product_code}"
f"/versions/{args.version}/api-docs.json"
)
payload = fetch_json(url, timeout)
raw_apis = payload.get("apis", {})
if isinstance(raw_apis, dict):
api_names = sorted(raw_apis.keys())
elif isinstance(raw_apis, list):
names = []
for item in raw_apis:
if isinstance(item, dict):
name = item.get("name") or item.get("apiName")
if name:
names.append(name)
elif isinstance(item, str):
names.append(item)
api_names = sorted(set(names))
else:
api_names = []
json_file = output_dir / f"{args.product_code}_{args.version}_api_docs.json"
md_file = output_dir / f"{args.product_code}_{args.version}_api_list.md"
json_file.write_text(json.dumps(payload, ensure_ascii=False, indent=2), encoding="utf-8")
md_lines = [
f"# {args.product_code} {args.version} API List",
"",
f"- Source: {url}",
f"- API count: {len(api_names)}",
"",
]
md_lines.extend([f"- `{name}`" for name in api_names])
md_file.write_text("\n".join(md_lines) + "\n", encoding="utf-8")
print(f"Saved: {json_file}")
print(f"Saved: {md_file}")
if __name__ == "__main__":
main()
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85How it compares
Choose this skill when the stack already runs on Alibaba Cloud and needs managed government-ID verification via Cloudauth OpenAPI rather than building custom document OCR pipelines.
FAQ
What Alibaba Cloud product does alicloud-security-id-verification-cloudauth manage?
alicloud-security-id-verification-cloudauth targets Alibaba Cloud ID Verification with product code Cloudauth and default OpenAPI version 2022-11-25. The skill discovers available RPC endpoints through metadata APIs before calling Create, Update, List, Describe, or Query operatio
Which credentials does alicloud-security-id-verification-cloudauth require?
alicloud-security-id-verification-cloudauth expects least-privilege RAM credentials via ALIBABACLOUD_ACCESS_KEY_ID and ALIBABACLOUD_ACCESS_KEY_SECRET, with optional ALIBABACLOUD_REGION_ID. If environment variables are unset, the skill falls back to ~/.alibabacloud/credentials.
How does alicloud-security-id-verification-cloudauth discover Cloudauth APIs?
alicloud-security-id-verification-cloudauth runs python scripts/list_openapi_meta_apis.py for metadata-first API inventory before business calls. Artifacts land under output/aliyun-cloudauth-verify/ with region, resource ID, and time-range parameters for reproducibility.