Agent skill · aliyun
alibabacloud-cloud-native-internet-diagnostics
Read-only diagnostics for the public internet egress capability of Alibaba Cloud cloud-native products: cloud-native gateway (MSE), cloud-native API gateway, AI gateway, Serverless App Engine (SAE), and Function Compute (FC). Use when the user asks whether such an instance can access the public internet, reports outbound connectivity failure, or wants to check a fixed public egress IP. Resolves the VPC/vSwitch bound to the instance, then verifies NAT gateway SNAT egress for that vSwitch; produces a diagnosis report. Read-only: never creates, modifies, or deletes any resource. Triggers: "cloud-native gateway public internet", "MSE gateway outbound", "APIG outbound connectivity", "AI gateway public network", "SAE public internet", "SAE outbound connectivity", "FC fixed public IP", "FC function outbound", "cloud-native internet diagnostics", "vSwitch NAT SNAT egress".
What it needs
About 8k tokens when loaded.
What this skill does
Cloud-Native Product Public Internet Egress Diagnostics Diagnose whether an Alibaba Cloud cloud-native product instance (MSE gateway, cloud-native API gateway, AI gateway, SAE application, FC function) can reach the public internet. The flow queries the instance to obtain its bound VPC and vSwitch, then checks whether that vSwitch has a NAT gateway SNAT public egress. Execution Principle MANDATORY: Read-only: this skill only queries and reports. It never creates, modifies, or deletes any resource. Single entry point: all cloud queries MUST be executed through scripts/cloudnativeinternetdiag.py. Do not hand-assemble CLI command chains or inline Python. Single-resource scope: only the instance / application / function explicitly provided by the user is queried. No scanning, enumeration, or probing of other resources. Fail fast: if the script exits non-zero, stop and report the error. Do not retry with ad-hoc CLI variants. Strict sequencing: steps below run in order; any step failure aborts the diagnosis with the error preserved. Prerequisites (Runtime and aliyun CLI Version) Requirement Value Why ------------- ------- ----- Python 3.8 or newer runs the two scripts; standard library only, no third-party packages aliyun CLI version 3.3.3 or newer, on PATH all cloud queries go through the CLI in lowercase-hyphenated plugin mode (e.g. aliyun vpc describe-nat-gateways); older builds lack the plugin-mode metadata and the --user-agent flag this skill relies on Check the installed version first: If the reported version is older than 3.3.3, upgrade the CLI before running any diagnosis (any one of these routes): A CLI older than 3.3.3 is a hard blocker: report the version gap and the upgrade command to the user instead of falling back to hand-assembled HTTP calls. Credentials Credentials are resolved automatically by the aliyun CLI default credential chain (environment or ~/.aliyun/config.json). Do not read, print, or pass AK/SK/STS tokens explicitly. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aliyun/alibabacloud-cloud-native-internet-diagnostics