Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add aliyun/alibabacloud-rds-openapi-mcp-server --skill alibabacloud-rds-instances-managegit clone --depth 1 https://github.com/aliyun/alibabacloud-rds-openapi-mcp-serverWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aliyun/alibabacloud-rds-openapi-mcp-server/alibabacloud-rds-instances-manage)<a href="https://agentmods.dev/skills/aliyun/alibabacloud-rds-openapi-mcp-server/alibabacloud-rds-instances-manage"><img src="https://agentmods.dev/badge/skills/aliyun/alibabacloud-rds-openapi-mcp-server/alibabacloud-rds-instances-manage/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/aliyun/alibabacloud-rds-openapi-mcp-server/alibabacloud-rds-instances-manage"><img src="https://agentmods.dev/badge/skills/aliyun/alibabacloud-rds-openapi-mcp-server/alibabacloud-rds-instances-manage.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 14 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 14 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium MCP Rug Pull · line 21 uvx/uv tool run commands without ==version create a rug-pull risk.Fix: Pin the version: uvx package-name==1.2.3
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00107 | $0.01518 |
| Opus 5 | $0.00053 | $0.00759 |
| Sonnet 5 | $0.00021 | $0.00304 |
| Haiku 4.5 | $0.00011 | $0.00152 |
Grade A, and why
alibabacloud-rds-instances-manage scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 107 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Alibabacloud RDS Instances Manage
本 Skill 让大模型通过命令行调用阿里云 RDS OpenAPI 与只读 SQL 能力,用于查询/管理 RDS 实例。
何时使用
- 用户询问某地域的 RDS 实例列表、实例详情、监控、慢日志、参数、账号、数据库、白名单等
- 用户需要对实例执行只读 SQL(如
explain、show create table、query_sql)或查看大表/碎片 - 用户需要创建/修改实例、账号、参数、规格、重启、公网连接等 OpenAPI 操作
前置条件
- 安装:已安装本包(任选其一)
- 从项目根目录:
uv pip install -e .或pip install -e . - 或使用:
uvx alibabacloud-rds-openapi-mcp-server时,需在本地安装后使用alibabacloud-rds-instances-manage命令
- 从项目根目录:
- 凭证:必须提供阿里云 AK/SK 环境变量
ALIBABA_CLOUD_ACCESS_KEY_IDALIBABA_CLOUD_ACCESS_KEY_SECRET- (可选)
ALIBABA_CLOUD_SECURITY_TOKEN(STS) - (可选)
MCP_TOOLSETS,默认rds,可设为rds,rds_custom_read等
配置 entries(推荐)
在 OpenClaw、Claude Code 等平台中,建议在 skill 的 entries 里为本 skill 配置 env,把 ALIBABA_CLOUD_ACCESS_KEY_ID 和 ALIBABA_CLOUD_ACCESS_KEY_SECRET 写进去,这样运行时无需再单独配置环境变量,便于后续使用。
OpenClaw:在 ~/.openclaw/openclaw.json 的 skills.entries 中为 alibabacloud-rds-instances-manage 增加一项,并写入 env:
{
"skills": {
"entries": {
"alibabacloud-rds-instances-manage": {
"enabled": true,
"env": {
"ALIBABA_CLOUD_ACCESS_KEY_ID": "你的 AccessKey ID",
"ALIBABA_CLOUD_ACCESS_KEY_SECRET": "你的 AccessKey Secret"
}
}
}
}
}
可选:若使用 STS,可在同一 env 中增加 ALIBABA_CLOUD_SECURITY_TOKEN;若需指定工具集,可增加 MCP_TOOLSETS(如 "rds,rds_custom_read")。
Claude Code / 其他平台:在对应技能的配置中找到「entries」或「环境变量」项,为 alibabacloud-rds-instances-manage 配置上述两个 env 即可。
标准流程
-
列出可用工具(若不确定工具名)
alibabacloud-rds-instances-manage list输出为 JSON 数组,每项含
name、description。 -
执行工具
alibabacloud-rds-instances-manage run <工具名> '<JSON 参数>'- 参数为 JSON 对象,键为工具文档中的参数名(如
region_id、db_instance_id)。 - 示例:查询杭州地域实例
alibabacloud-rds-instances-manage run describe_db_instances '{"region_id":"cn-hangzhou"}' - 示例:查询实例详情
alibabacloud-rds-instances-manage run describe_db_instance_attribute '{"region_id":"cn-hangzhou","db_instance_id":"rm-xxxxx"}' - 示例:执行只读 SQL
alibabacloud-rds-instances-manage run query_sql '{"region_id":"cn-hangzhou","db_instance_id":"rm-xxxxx","db_name":"mydb","sql":"SELECT 1"}'
- 参数为 JSON 对象,键为工具文档中的参数名(如
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago First seen · 107 lines · 107 tokens per session scan A ab0cf888025c
alibabacloud-rds-instances-manage is a skill published in the GitHub repository aliyun/alibabacloud-rds-openapi-mcp-server (55 stars, last pushed 25d ago), licensed Apache-2.0. It adds 107 tokens to every session and 1,518 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
huawei-cloud-rds-smart-service
Huawei Cloud RDS (Relational Database Service) full-scenario intelligent service covering all database engines (MySQL, PostgreSQL, SQL Server, MariaDB, GaussDB for MySQL, TaurusDB). Provides six capability domains: (1) Basic intelligent Q&A for RDS product features, best practices, and specifications; (2) SQL…
cis-aws-foundations-3.2.1
Ensure that encryption-at-rest is enabled for RDS instances.
cis-aws-foundations-3.2.2
Ensure the Auto Minor Version Upgrade feature is enabled for RDS instances.
cis-aws-foundations-3.2.4
Ensure Multi-AZ deployments are used for enhanced availability in Amazon RDS.
cis-aws-database-3.1
Ensure to Choose the Appropriate Database Engine.
cis-aws-database-3.10
Ensure to Enable Backup and Recovery.