A secure, automated toolkit for managing terminal devices, user directory accounts, and network access policies on Alibaba Cloud SASE.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install alibabacloud-csas-user-device-ops
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install alibabacloud-csas-user-device-ops using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Alibaba Cloud SASE User and Device Operations?
This integration delivers robust administration capabilities for Alibaba Cloud Secure Access Service Edge (SASE) directly into your workspace. Powered by Openclaw Skills, this automation module enables secure querying of more than 20 terminal device filters, validates private application authorization mappings, and audits active directory structures.
By leveraging the native Aliyun CLI and automated lifecycle commands, it replaces manual console tasks with precise, programmatic execution. The skill acts as an enterprise-grade utility for system administrators and security engineers seeking to automate zero-trust compliance checks and lock compromised devices quickly.
Alibaba Cloud SASE User and Device Operations Use Cases
- Identify and list long-term offline or personal terminal devices connected to the network.
- Query authorized application access paths and permissions for individual SASE users.
- Perform read-only automated scans of inactive devices exceeding customized time thresholds.
- Remotely lock or unlock terminal devices in bulk to isolate potential security threats.
- Troubleshoot system permission issues and inspect active Identity Provider configurations.
How Alibaba Cloud SASE User and Device Operations Works
- Lifecycle Activation: Initializes the Aliyun CLI automated mode and applies custom user-agent tracking tags for clean telemetry.
- Security and RAM Audits: Inspects local profile configurations to ensure robust credentials and automatically flags missing SASE policy actions.
- Query Optimization: Uses high-performance filters with advanced API parameters to isolate targeted devices, user groups, and app definitions.
- Dry-Run Analysis: Processes structural evaluations for locking devices using non-destructive simulation modes to preview potential changes.
- Idempotent Lock & Verification: Processes target modification requests safely, executing a post-action check to verify exact state changes before exit.
Alibaba Cloud SASE User and Device Operations Setup
To deploy this skill, verify that your runtime environment has the Aliyun CLI (version >= 3.3.3) properly configured:
aliyun version
Ensure that the SASE plugin components are updated and set to auto-install:
aliyun configure set --auto-plugin-install true
aliyun plugin update
When deploying through Openclaw Skills, bind your execution environment with an Alibaba Cloud RAM profile containing the AliyunCSASFullAccess system policy or corresponding narrow API-level permissions.
Alibaba Cloud SASE User and Device Operations Data Schema & Taxonomy
The skill structures metadata definitions and maps command parameters efficiently. Target parameters are summarized in the schema below:
| Parameter | Input Format / Constraint | Purpose |
|---|---|---|
--device-action |
Locked, Lost, Unbound, Unlocked, Found |
Modifies the connectivity state of target terminals |
--device-statuses |
List of enum values: Online, Offline, LongTermOffline |
Categorizes terminals by runtime operational status |
--device-types |
Space-separated values: Windows, macOS, Linux |
Filters query payloads by target client environment |
--dlp-statuses |
Enum values: Enabled, Disabled, Unprovisioned |
Scans for Data Loss Prevention status across devices |
All analytical scripts produce clean, readable Markdown logs, allowing you to instantly extract the target user IDs, unique device tags, and compliance groups.
Alibaba Cloud SASE User and Device Operations Advanced Features
- Granular AI-Mode Controls: Auto-configures specialized tracking contexts and reliably closes runtime connections on any execution outcome.
- Interactive Barrier Controls: Includes strict validation prompts before executing reversible modification commands.
- Auto-Pagination Processing: Employs built-in CLI queries to filter results efficiently across vast device fleets without manual script tuning.
- Proactive Permission Handlers: Automatically stops on HTTP 403 errors, identifying the exact missing RAM action and providing recovery instructions.
SKILL.md
Loading
Related Openclaw Skills
Alibaba Cloud PTS Task Worker
An automated performance testing worker skill that executes CRUD, monitoring, and execution operations for Alibaba Cloud PTS (Performance Testing Service) scenarios.
Wang Xiaobo Style Writing Assistant
A sophisticated Chinese essay-writing skill that replicates the unique, logically rigorous, and intellectually playful style of acclaimed essayist Wang Xiaobo.
Wang Xiaobo Style Writing Assistant
A structured writing assistant designed to teach and generate Chinese essays in the analytical, logical, and humorous style of Chinese essayist Wang Xiaobo.
DingTalk Shanji Minutes Extractor
An AI-ready command-line automation skill for extracting meeting minutes, summaries, and transcripts from DingTalk Shanji.
Alibaba Cloud HTTPDNS OpenAPI Skill
An AI agent skill for managing Alibaba Cloud HTTPDNS OpenAPIs, enabling seamless domain administration, secure secret handling, and resolution statistics retrieval via the Alibaba Cloud CLI.
Git SCM Integration
A robust Openclaw skill designed to automate the cloning and updating of remote git repositories within AI agent workflows.
Featured*
