Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add aliyun/alibabacloud-agent-toolkit --skill alibabacloud-domain-websitegit clone --depth 1 https://github.com/aliyun/alibabacloud-agent-toolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aliyun/alibabacloud-agent-toolkit/alibabacloud-domain-website)<a href="https://agentmods.dev/skills/aliyun/alibabacloud-agent-toolkit/alibabacloud-domain-website"><img src="https://agentmods.dev/badge/skills/aliyun/alibabacloud-agent-toolkit/alibabacloud-domain-website/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/aliyun/alibabacloud-agent-toolkit/alibabacloud-domain-website"><img src="https://agentmods.dev/badge/skills/aliyun/alibabacloud-agent-toolkit/alibabacloud-domain-website.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00089 | $0.00747 |
| Opus 5.5 | $0.00036 | $0.00299 |
| Sonnet 5.5 | $0.00018 | $0.00149 |
| Haiku 4.5 | $0.00009 | $0.00075 |
Grade A, and why
alibabacloud-domain-website scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 36 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Alibaba Cloud Domain Website
Read DomainCLI runtime and safety contract before ANY execution, including version checks, supplied-state decisions and final result fields. It is mandatory for each activation.
Use the bundled local preflight helper as the single owner of version checks; do not repeat its checks manually. For a missing/outdated runtime or explicit user authorization for possible setup, read Authorized dependency installation/update guide before using the setup flag. Actual explicit user/task-prompt authorization permits reviewed sandbox setup once, double-version verification, then resumption. Otherwise request setup authorization once and return awaiting_input/write_effect=none. Never install implicitly or treat setup consent as business-write approval.
Workflow
- Input: freeze supplied bizId, conversation/chat IDs, domain, channel and intended change. Resolve missing IDs only from successful scoped discovery with an unambiguous selector.
- Judgment: select thematic wxz --operation . Before any publication preview, read project --operation show for the exact bizId and require structured same-project success. A project-not-found response ends blocked_target/write_effect=none, without preview, confirmation or publication. Verify the requested channel is supported without silently remapping it; then read relevant quota/binding/certificate/ICP prerequisites. Never substitute projects or widen plugin scope from mine to public.
- Confirmation: creation/generation quota, deploy, rollback, offline, binding/certificate and destructive actions need successful same-target preview followed by a fresh user reply. Each material stage requires its own approval.
- Execute: approved leaf once using documented flags. A cloud website-plugin operation is not permission to install local dependencies or execute downloaded content.
- Readback: use same-project deploy --operation status or corresponding read within budget. Preview URL is not publication. site domain-icp changes display, not filing approval. DNS changes route to control with a separate anti-stale plan.
- Deliver: exact project, preview/deployment state, safe IDs, channel and remaining handoff. Registration, filing, DNS, binding, certificate and live deployment are separate states.
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 36 lines · 89 tokens per session scan A 94cb9195276c
alibabacloud-domain-website is a skill published in the GitHub repository aliyun/alibabacloud-agent-toolkit (28 stars, last pushed 5d ago), licensed Apache-2.0. It adds 89 tokens to every session and 747 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-15.
Other skills, from other repositories
alibabacloud-ecs-windows-os-troubleshooting
Troubleshoot and repair Alibaba Cloud ECS Windows instances from inside the GuestOS or remotely via Cloud Assistant. Use whenever the user reports any Windows symptom or asks for a health check on an ECS Windows instance, even vague ones like "check this machine": boot failures (BSOD, black screen, boot loop, stuck at…
alibabacloud-ecs-linux-os-troubleshooting
Troubleshoot an Alibaba Cloud ECS Linux OS. Use when a user needs to diagnose a specified ECS Linux instance, such as instance stuck in Starting, boot stuck, SSH/VNC/Workbench login failure, network issues, disk/FS issues, performance anomalies, suspected mining or hidden processes, crash/hang, clock drift, or…
alibabacloud-ecs-sec-kernel
A Linux kernel security scanner that checks for known CVE vulnerabilities and can test whether they are exploitable. CVEs are public identifiers for reported security flaws; the tests need administrator access and can crash the system.
alibabacloud-ecs-sec-userspace
A Linux server security scanner and investigation tool for Alibaba Cloud ECS machines. It checks for signs of intrusion and collects evidence about processes, network activity, logins, persistence, rootkits, malware, memory, and container escapes.
ideogram-ultra
Build Ideogram 4 (Ideogram Ultra) txt2img and img2img workflows with the local open-weights model, dual conditional/unconditional models with DualModelGuider, Qwen3-VL text encoder, and structured JSON ("compositional deconstruction") prompts for strong text rendering and layout control.
model-compatibility
Model family compatibility matrix covering loaders, resolutions, samplers, CFG, VAE, ControlNet, and LoRA compatibility for SD 1.5, SDXL, Flux, SD3, and video models.