alicloud-security-cloudfw

What This Skill Does

The alicloud-security-cloudfw skill serves as an interface for managing Alibaba Cloud Cloud Firewall resources. By leveraging the official Alibaba Cloud OpenAPI and SDKs, this skill enables automated policy management, infrastructure security monitoring, and incident response workflows. It is designed to handle common operational tasks such as listing firewall rules, creating protection policies, and querying the security status of cloud assets. The skill implements strict authentication protocols, ensuring that sensitive credentials are handled via environment variables or standard configuration files, adhering to the principle of least privilege.

Installation

To integrate this capability into your agent, use the ClawHub command-line tool. Run the following command in your terminal: clawhub install openclaw/skills/skills/cinience/alicloud-security-cloudfw After installation, ensure your environment is prepared by exporting your ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET. You may optionally set ALICLOUD_REGION_ID to target a specific region by default. Validation is performed automatically via the included scripts to confirm that the environment is correctly configured and the SDK dependencies are operational.

Use Cases

This skill is ideal for security engineers and DevOps teams who need to manage network security at scale. Key use cases include:

• Auditing existing inbound and outbound firewall policies to identify overly permissive rules.
• Automating the deployment of security group changes across multiple regions during incident response.
• Programmatic health checks of firewall instances to verify that logging and threat detection are enabled.
• Generating compliance reports by extracting firewall resource snapshots into the project output directory.

Example Prompts

1. "List all active firewall rules in the cn-hangzhou region and save the output to the output folder."
2. "Check the status of my Cloud Firewall instance and report if there are any critical unmitigated threats."
3. "Create a new outbound firewall rule to block traffic to port 22 for the specified resource group."

Tips & Limitations

Always verify the regional scope before running any mutation operations such as policy creation or rule modification. For operations involving high-traffic environments, we recommend using the discovery metadata endpoints first to ensure your API parameters are aligned with the current schema. The skill is limited to the functionality provided by the 2017-12-07 Cloud Firewall API version. If you require advanced features from newer versions, ensure that your SDK environment is updated accordingly. Always check the output/alicloud-security-cloudfw/ directory after execution to verify your logs and generated artifacts.