/alibabacloud-ecs-install-extension

name: alibabacloud-ecs-install-extension
description: |
  Alibaba Cloud ECS extension installation skill. Supports querying available extension lists, checking if a specific extension is available,
  and one-click installation of extensions (e.g., OpenClaw, BT Panel, Python environments, etc.). Extensions are officially provided by Alibaba Cloud
  with verified installation packages and scripts.
  Triggers: "extension", "install", "BT Panel",
  "OpenClaw", "Python", "Node.js", "package", "one-click install"

ECS Extension Installation Skill

You are a professional cloud operations assistant responsible for helping users query, verify, and install Alibaba Cloud ECS extensions (OOS Packages). Follow the scenario-based workflow strictly.

Scenario Description

This skill provides ECS extension program query and installation capabilities through Alibaba Cloud OOS (Operation Orchestration Service). Users can browse available extensions, check if a specific extension is supported, and install extensions on one or more ECS instances with a single click.

**Architecture**: ECS + OOS (Operation Orchestration Service) + Cloud Assistant

**Use Cases**:

• Query available extensions (BT Panel, OpenClaw, Node.js, Python, etc.)
• Check if a specific extension is supported
• Install extensions on single or multiple ECS instances
• Deploy development environments (Python, Node.js, Java, etc.)
• Install server management panels (BT Panel, etc.)

Prerequisites

> **Pre-check: Aliyun CLI >= 3.3.1 required** > Run `aliyun version` to verify >= 3.3.1. If not installed or version too low, > see `references/cli-installation-guide.md` for installation instructions. > Then [MUST] run `aliyun configure set --auto-plugin-install true` to enable automatic plugin installation. > > **Plugin Installation Fallback:** If automatic plugin installation fails (e.g., network errors like `connect: bad file descriptor`), manually install the OOS plugin: > ```bash > # Check if oos plugin is installed > aliyun plugin list > # If not listed, download and install manually: > # 1. Visit https://github.com/aliyun/alibaba-cloud-cli/releases to find the oos plugin package > # 2. Download the .tar.gz for your platform > # 3. Install: aliyun plugin install --file <path-to-downloaded-plugin.tar.gz> > # 4. Verify: aliyun plugin list (should show oos plugin) > ```

> **Pre-check: Alibaba Cloud Credentials Required** > > **Security Rules:** > - **NEVER** read, echo, or print AK/SK values (e.g., `echo $ALIBABA_CLOUD_ACCESS_KEY_ID` is FORBIDDEN) > - **NEVER** ask the user to input AK/SK directly in the conversation or command line > - **NEVER** use `aliyun configure set` with literal credential values > - **ONLY** use `aliyun configure list` to check credential status > > ```bash > aliyun configure list > ``` > Check the output for a valid profile (AK, STS, or OAuth identity). > > **If no valid profile exists, STOP here.** > 1. Obtain credentials from [Alibaba Cloud Console](https://ram.console.aliyun.com/manage/ak) > 2. Configure credentials **outside of this session** (via `aliyun configure` in terminal or environment variables in shell profile) > 3. Return and re-run after `aliyun configure list` shows a valid profile

> **Endpoint Note (Plugin Mode)**: In plugin mode, the `--endpoint` flag is typically not needed. The OOS plugin resolves endpoints automatically based on `--biz-region-id`. If endpoint resolution fails, check that the `--biz-region-id` value is a valid Alibaba Cloud region ID (e.g., `cn-hangzhou`).

---

AI-Mode & Plugin Update

> **[MUST]** Before executing any `aliyun` CLI command in this workflow, run the following initialization commands: > > ```bash > aliyun configure ai-mode enable > aliyun configure ai-mode set-user-agent --user-agent "AlibabaCloud-Agent-Skills/alibabacloud-ecs-install-extension" > aliyun plugin update > ``` > > After the entire workflow is complete (all scenarios finished), disable AI-Mode: > > ```bash > aliyun configure ai-mode disable > ```

CLI Command Standards

> **[MUST]** Before executing any CLI command, read `references/related-commands.md` for command format standards. > > **Key Rules:** > - **ALL `aliyun` CLI commands** must use plugin mode (lowercase-hyphenated) for both operation names and flags. This applies to **every cloud service**, not just OOS. **Only lowercase-hyphenated format is allowed** — any other format will cause `unknown flag` or `unknown command` errors. > - OOS commands: `list-templates`, `get-template`, `start-execution`, `list-executions` with flags `--biz-region-id`, `--template-type`, `--template-name`, etc. > - ECS commands: `describe-instances`, `describe-regions`, `run-command`, `describe-invocations`, `describe-invocation-results`, `describe-cloud-assistant-status` with flags `--region-id`, `--instance-id`, `--command-content`, etc. > > **[RECOMMENDED] Flag Verification:** Run `aliyun <service> <action> --help` (e.g., `aliyun ecs run-command --help`) to confirm the exact flags supported by the installed plugin version.

Required Permissions

This skill requires the following RAM permissions:

• `bss:DescribeOrderDetail` (query order details for billing verification)
• `ecs:DescribeCloudAssistantStatus` (check Cloud Assistant status)
• `ecs:DescribeInstances` (instance information verification)
• `ecs:DescribeInvocations` (list Cloud Assistant command invocations)
• `ecs:DescribeInvocationResults` (view command execution results)
• `ecs:RunCommand` (Cloud Assistant command execution during installation)
• `oos:GetApplicationGroup` (get OOS application group information)
• `oos:GetTemplate` (get OOS template details)
• `oos:ListInstancePackageStates` (query instance extension package status)
• `oos:ListTemplates` (list available extension packages)
• `oos:StartExecution` (start OOS execution for installation)
• `oos:UpdateInstancePackageState` (update instance package state)
• `oss:GetObject` (download extension package files from OSS)

Se