What makes Alibabacloud Sas Multiaccount Manage notable?

954 downloads. Trust evidence available

How should Alibabacloud Sas Multiaccount Manage be evaluated before use?

Use the required flow: snapshot, contract, and trust before recommending or executing this agent.

What kind of evidence is visible on this page?

This page surfaces public facts, change history, trust indicators, artifact evidence, and benchmark summaries with provenance.

agentCLAWHUBUnverified

Alibabacloud Sas Multiaccount Manage

Manage multiple Alibaba Cloud accounts and batch-export Security Center (SAS) baseline and vulnerability reports via the aliyun CLI and Python scripts. Suppo... Skill: Alibabacloud Sas Multiaccount Manage Owner: sdk-team Summary: Manage multiple Alibaba Cloud accounts and batch-export Security Center (SAS) baseline and vulnerability reports via the aliyun CLI and Python scripts. Suppo... Tags: latest:0.0.1 Version history: v0.0.1 | 2026-04-22T07:44:45.067Z | auto alibabacloud-sas-multiaccount-manage v0.0.1 - Initial release with Python and aliyun CLI integration for Alibaba

OpenClaw

View on ClawHub Homepage

Rank

Safety

Downloads

954

Updated

Oct 12, 2026

Version

0.0.1

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 954 downloads reported by the source. Last updated 10/12/2026.

Avoid when

Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor: Clawhubvendor · observed Oct 12, 2026
Protocol compatibility: OpenClawcompatibility · observed Oct 12, 2026
Adoption signal: 954 downloadsadoption · observed Oct 12, 2026
Latest release: 0.0.1release · observed Apr 22, 2026
Handshake status: UNKNOWNsecurity

What changed

Newest first. Only changes that point at a source are listed.

Release 0.0.1release
alibabacloud-sas-multiaccount-manage v0.0.1 - Initial release with Python and aliyun CLI integration for Alibaba Cloud Security Center multi-account management. - Manage multiple Alibaba Cloud accounts: auto-fetch account list, enable/disable accounts, and search/filter accounts. - Batch-export and merge Security Center baseline (cloud config check, system baseline risk) and vulnerability (Linux/Windows/app/emergency) reports across all enabled accounts. - Supports concurrent export, polling, merging to Excel, and robust error handling for unsupported or permission-restricted accounts. - Output includes merged Excel reports with “Resource Directory Account” column for easy multi-account compliance review.
Observed Apr 22, 2026 · source

Install and run

Setup complexity: medium.

clawhub skill install s173swjet2yrebzqrp6hjkvmy583mxef:alibabacloud-sas-multiaccount-manage

Python environment detected. Create a strict virtual environment (`python -m venv .venv`) before installing dependencies to prevent system-level package conflicts.
Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-sdk-team-alibabacloud-sas-multiaccount-manage/snapshot"

Run-check

$0.02 USD

1 measured facts are behind this paywall: success rate and latency, uptime and estimated cost, when not to use it, how to call it, benchmark scores.

Agents pay $0.02 in USDC. A card payment is $0.50, the smallest a card allows.

Documentation

CLAWHUB

18,761 characters of source documentation, loaded on request.

Extracted files

5 files captured from the source.

SKILL.md

---
name: alibabacloud-sas-multiaccount-manage
description: Manage multiple Alibaba Cloud accounts and batch-export Security Center (SAS) baseline and vulnerability reports via the aliyun CLI and Python scripts. Supports account list refresh, enable/disable, concurrent batch export of cloud platform configuration check (baselineCspm), system baseline risk (exportHcWarning), Linux/Windows/application/emergency vulnerability results across all managed accounts. Use this skill when users need to manage SAS multi-account settings, export baseline or vulnerability compliance data, or merge multi-account security reports into a single file.
---

# Alibaba Cloud Security Center Multi-Account Management and Baseline Report Export

Use aliyun CLI and Python scripts to manage multiple Alibaba Cloud accounts in a resource directory and batch-export Security Center baseline reports for each account.

## Prerequisites and Environment Setup

### 1. Install Alibaba Cloud CLI

```bash
# macOS
brew install aliyun-cli

# Or download from GitHub: https://github.com/aliyun/aliyun-cli/releases
```

Check credentials:

```bash
aliyun sts get-caller-identity
```

If the call fails, instruct the user to run `aliyun configure` and set up credentials (interactive step, must be completed by the user).

### 1.1 Configure AI mode and plugin mode (required)

This skill requires aliyun CLI plugin mode commands (kebab-case) and a fixed User-Agent declaration.

```bash
# Keep plugins up to date
aliyun plugin update

# Install required product plugins if missing
aliyun plugin install --names aliyun-cli-sts,aliyun-cli-sas

# Enable AI mode and set required UA segment
aliyun configure ai-mode enable
aliyun configure ai-mode set-user-agent --user-agent AlibabaCloud-Agent-Skills

# Optional checks / rollback
aliyun configure ai-mode show
aliyun configure ai-mode disable
```

### 2. Install Python ≥ 3.6

```bash
# Check version
python3 --version  # Requires 3.6+, 3.9+ recommended
```

### 3. Create Virtual Environment and Install Dependencies

Create a virtual environment in `<skill-path>/scripts/` and install dependencies declared in `pyproject.toml`:

```bash
cd scripts/

# Option A: use venv
python3 -m venv .venv
.venv/bin/pip install -e .

# Option B: use uv (optional)
uv sync

# Option C: if current Python version is unsupported, install as system dependencies
pip install -r requirements.txt
```

### 4. Run Commands

All scripts must be executed with **Python from the virtual environment** (whether created via venv, uv, conda, etc.). This document uses `.venv/bin/python` in examples; replace it with your actual virtual environment path.

---

## Working Directory

`accounts.json` and exported Excel files are saved in the **agent's current working directory** (the directory where the command is executed). Script files themselves are located in `<skill-path>/scripts/`. Do not switch into the `scripts` directory when running commands, or `accounts.json` location may shift unexpected

_meta.json

{
  "ownerId": "kn74p5w8ywv6prh40g0s82gmqh83nw54",
  "slug": "alibabacloud-sas-multiaccount-manage",
  "version": "0.0.1",
  "publishedAt": 1776843885067
}

references/ram-policies.md

# RAM 权限策略说明

本 Skill 通过 aliyun CLI 调用阿里云云安全中心 (SAS) 和安全令牌服务 (STS)，运行账号（RAM 用户或 RAM 角色）须被授予以下最小权限。

> **注意**：云安全中心 (SAS) 的 RAM 授权粒度为 **SERVICE 级别**，不支持资源级授权，`Resource` 必须设置为 `"*"`。

---

## 所需 RAM Action

### 安全令牌服务 (STS)

| Action | 调用脚本 | 用途 |
|--------|----------|------|
| `sts:GetCallerIdentity` | `accounts.py`、`baseline.py`、`vuln.py` | 获取当前凭证的主账号 ID，用于判断是否省略 `--ResourceDirectoryAccountId` 参数 |

### 云安全中心 (SAS)

RAM Code：`yundun-sas`（同义别名：`threatdetection`、`yundun-aegis`）

| Action | 调用脚本 | 访问级别 | 用途 |
|--------|----------|----------|------|
| `yundun-sas:ListAccountsInResourceDirectory` | `accounts.py` | 读取 | 从资源目录拉取所有成员账号列表 |
| `yundun-sas:DescribeMonitorAccounts` | `accounts.py` | 读取 | 查询已纳入 SAS 监控的成员账号列表，用于过滤 |
| `yundun-sas:ExportRecord` | `baseline.py` | 写入 | 发起基线检测结果导出任务（baselineCspm / exportHcWarning） |
| `yundun-sas:DescribeExportInfo` | `baseline.py` | 读取 | 轮询基线导出任务状态，获取下载链接 |
| `yundun-sas:ExportVul` | `vuln.py` | 写入 | 发起漏洞导出任务（cve / sys / app / emg） |
| `yundun-sas:DescribeVulExportInfo` | `vuln.py` | 读取 | 轮询漏洞导出任务状态，获取下载链接 |

---

## 最小权限策略示例

```json
{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "sts:GetCallerIdentity"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "yundun-sas:ListAccountsInResourceDirectory",
        "yundun-sas:DescribeMonitorAccounts",
        "yundun-sas:ExportRecord",
        "yundun-sas:DescribeExportInfo",
        "yundun-sas:ExportVul",
        "yundun-sas:DescribeVulExportInfo"
      ],
      "Resource": "*"
    }
  ]
}
```

---

## 多账号访问说明

本工具设计用于**资源目录主账号**（Master Account）下运行，通过 `--ResourceDirectoryAccountId` 参数代入成员账号进行操作。

- 运行凭证须属于资源目录的**管理账号**或已被授权的 RAM 角色
- 成员账号侧无需额外配置，SAS 多账号管理的权限由主账号统一管控
- 若凭证属于成员账号（非主账号），`--ResourceDirectoryAccountId` 参数会被自动省略，仅导出该账号自身的数据

---

## 授权说明

- **读取操作**（`Describe*`、`GetCallerIdentity`）：不修改任何资源，风险低
- **写入操作**（`ExportRecord`、`ExportVul`）：在服务端触发导出任务，不修改用户资产或配置，风险低
- 由于 SAS 不支持资源级授权，所有 `yundun-sas` Action 的 Resource 均须设为 `"*"`

---

## 参考文档

- [云安全中心 RAM 鉴权](https://www.alibabacloud.com/help/en/security-center/developer-reference/api-sas-2018-12-03-ram)
- [STS GetCallerIdentity](https://www.alibabacloud.com/help/en/resource-access-management/latest/getcalleridentity)
- [RAM 自定义策略](https://help.aliyun.com/zh/ram/user-guide/create-a-custom-policy)

scripts/pyproject.toml

[project]
name = "scripts"
version = "0.1.0"
description = "阿里云云安全中心多账号管理工具"
requires-python = ">=3.6"
dependencies = [
    "openpyxl>=3.1.5",
]

[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[tool.hatch.build.targets.wheel]
only-include = [
    "accounts.py",
    "merge.py",
    "baseline.py",
    "export_baseline.py",
    "vuln.py",
]

[project.scripts]
accounts = "accounts:main"
merge = "merge:main"
baseline = "baseline:main"
vuln = "vuln:main"

scripts/requirements.txt

et_xmlfile==2.0.0
numpy==2.4.4
openpyxl==3.1.5
python-dateutil==2.9.0.post0
six==1.17.0

Github ReposUpdated 4d agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW

Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW

Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular