Agent skill · aliyun
alibabacloud-waf-lua-extension-dev
Use when creating, editing, or reviewing WAF 3.0 custom Lua extension plugins, plugin parameters, or request validation logic.
What it needs
About 6k tokens when loaded.
What this skill does
WAF Extension Plugin (Lua) Development & Review Alibaba Cloud WAF 3.0 "Extension Plugins" allow custom Lua scripts to hook into the request processing pipeline and implement security logic beyond the native rules. Official documentation: https://help.aliyun.com/zh/waf/web-application-firewall-3-0/user-guide/extensions This feature is supported only on the subscription Enterprise/Flagship editions and the pay-as-you-go edition, and it is a paid service. After a plugin is created, it takes effect only when it is referenced by a "Custom Rules" protection template. Key Constraints (Read First) Constraint Impact --- --- No OpenAPI / CLI Extension plugins can only be configured in the console; there is no corresponding aliyun command or SDK interface. Do not try to create/query plugins via CLI, and there is no capability to import local files Block-only action The "plugin action parameter" in debug testing currently supports only block mode; punish() means blocking the request No logging print/warn have no effect; there is no log output mechanism inside scripts. The only feedback is the execution-result panel of "Run Debug" in the console Association required to take effect After a plugin is created, it must be referenced by a "Custom Rules" protection template; the plugin logic executes only when the rule matches Plugin Composition An extension plugin consists of four parts in the console. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aliyun/alibabacloud-waf-lua-extension-dev