Run

aliyun version

to verify >= 3.3.3. If not installed or version too low, run

curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash

to install/update, or see

references/cli-installation-guide.md

for installation instructions.

[MUST] run

aliyun configure set --auto-plugin-install true

to enable automatic plugin installation. [MUST] run

aliyun plugin update

to ensure that any existing plugins are always up-to-date.

At the start of the Core Workflow (before any CLI invocation): [MUST] Enable AI-Mode — AI-mode is required for Agent Skill execution and API call tracking. Step 1: Run the following commands before any CLI invocation:

bash

aliyun configure ai-mode enable
aliyun configure ai-mode set-user-agent --user-agent "AlibabaCloud-Agent-Skills/alibabacloud-domain-manage"

Step 2: [MUST] Verify AI-mode is active by running:

bash

aliyun configure ai-mode status

If the output does NOT confirm ai-mode is enabled, STOP and retry Step 1. Do NOT proceed to any domain API call until ai-mode is confirmed active.

[MUST] Disable AI-Mode at EVERY exit point — Before delivering the final response for ANY reason, always disable AI-mode first. This applies to ALL exit paths: workflow success, workflow failure, error/exception, user cancellation, session end, or any other scenario where no further CLI commands will be executed.

bash

aliyun configure ai-mode disable

Pre-check: Alibaba Cloud Credentials Required

Security Rules:

• NEVER read, echo, or print AK/SK values (e.g.,

  echo $ALIBABA_CLOUD_ACCESS_KEY_ID

  is FORBIDDEN)
• NEVER ask the user to input AK/SK directly in the conversation or command line
• NEVER use

  aliyun configure set

  with literal credential values
• ONLY use

  aliyun configure list

  to check credential status

bash

aliyun configure list

Check the output for a valid profile (AK, STS, or OAuth identity).

If no valid profile exists, STOP here.

1. Obtain credentials from Alibaba Cloud Console
2. Configure credentials outside of this session (via

   aliyun configure

   in terminal or environment variables in shell profile)
3. Return and re-run after

   aliyun configure list

   shows a valid profile

1. Run

   aliyun version

   → verify output shows >= 3.3.3. If not, install/update CLI.
2. Run

   aliyun configure set --auto-plugin-install true

3. Run

   aliyun plugin update

4. Run

   aliyun configure ai-mode enable

5. Run

   aliyun configure ai-mode set-user-agent --user-agent "AlibabaCloud-Agent-Skills/alibabacloud-domain-manage"

6. Run

   aliyun configure ai-mode status

   → verify ai-mode is enabled. If NOT enabled, repeat Steps 4-5.
7. Run

   aliyun configure list

   → verify a valid profile exists. If not, STOP.

[MUST] Each step must be executed as a separate command. Do NOT combine or skip steps. Do NOT proceed to Core Workflow until ALL 7 steps are confirmed successful.

• I am NOT reading or echoing any AK/SK values
• My command uses

  domain

  (lowercase) as product code
• My command uses kebab-case for action and parameters
• My command includes

  --api-version 2018-01-29

• My command includes

  --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

• My command does NOT include

  --region-id

  (domain is a global service)
• AI-mode status has been verified as enabled in this session (Step 6 above)

[MUST] Read

references/related-commands.md

before every CLI call for exact syntax and parameter details.

domain

Domain

query-domain-list

QueryDomainList

--domain-name

--DomainName

--user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

--region-id

--region-id cn-hangzhou

.1

.2

--api-version 2018-01-29

references/ram-policies.md

QueryDomainList

QueryAdvancedDomainList

QueryDomainByDomainName

QueryDomainByInstanceId

[MUST] Permission Failure Handling: When any command or API call fails due to permission errors at any point during execution, follow this process:

1. Read

   references/ram-policies.md

   to get the full list of permissions required by this SKILL
2. Guide the user through requesting the necessary permissions
3. Pause and wait until the user confirms that the required permissions have been granted

CRITICAL: Never do these:

1. NEVER read/echo/print AK/SK values (e.g.,

   echo $ALIBABA_CLOUD_ACCESS_KEY_ID

   is FORBIDDEN)
2. NEVER ask the user to input AK/SK directly in conversation
3. NEVER use

   aliyun configure set

   with literal credential values
4. NEVER execute ANY command without

   --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

5. NEVER pass

   --region-id

   — domain API is a global service
6. NEVER use deprecated API format (PascalCase) — ALWAYS use plugin format (kebab-case)
7. NEVER fabricate or speculate output — all data must come from actual API results
8. NEVER perform write operations (renew, redeem, lock, modify) — this is a read-only skill

All operations in this skill are read-only. No user confirmation is required before execution.

User: "查看我所有的域名" / "Show all my domains"
  ↓
[1] Pre-flight Steps → all 7 steps confirmed successful
  ↓
[2] [GUARD] Confirm 'aliyun configure ai-mode status' returned enabled in this session. If not, go back and enable AI-mode first.
  ↓
[3] aliyun domain query-domain-list --api-version 2018-01-29 --page-num 1 --page-size 20 --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage
  ↓
[4] Display domain list with pagination info (TotalItemNum, CurrentPageNum, TotalPageNum)
  ↓
[5] If TotalPageNum > CurrentPageNum, inform user about remaining pages and offer to query next page
  ↓
[6] Output Validation: displayed count matches TotalItemNum from API response

Optional filters and sort parameters: see

references/related-commands.md § query-domain-list

1. --user-agent

   on every call — All

   aliyun domain

   commands MUST include

   --user-agent AlibabaCloud-Agent-Skills/alibabacloud-domain-manage

   .
2. Read

   references/related-commands.md

   before every CLI call — Always check exact parameter names, types, and valid values.
3. Use

   query-advanced-domain-list

   for filtered searches — When users want to filter by status, expiration date, domain type, or suffix, always prefer

   query-advanced-domain-list

   over client-side filtering.
4. Pagination awareness — Always check

   TotalPageNum

   vs

   CurrentPageNum

   . Proactively inform users about remaining pages.
5. Timestamp in milliseconds — For

   query-advanced-domain-list

   date filters, values must be in milliseconds since epoch.
6. Prefer read-only policies — Guide users to use

   AliyunDomainReadOnlyAccess

   system policy for minimum required permissions.
7. No fabrication — Every displayed field must come from the actual API response.
8. Disable AI-mode on exit — Always run

   aliyun configure ai-mode disable

   before ending.

This skill can NOT:

1. Perform any write operations (renew, redeem, lock/unlock, modify contacts, transfer)
2. Register or purchase new domains
3. Manage DNS records or DNSSEC
4. Create or manage domain info templates
5. Query task execution history or audit logs

For these capabilities, see Cross-Skill Guidance below.

alibabacloud-domain-trade

alibabacloud-domain-trade

alibabacloud-domain-certification

alibabacloud-domain-dns

alibabacloud-domain-audit

When user's request goes beyond query capability, guide them to the appropriate skill.

1. All operations in this skill are read-only and synchronous. No async task polling is needed.

2. query-domain-by-domain-name

   and

   query-domain-by-instance-id

   return the same response structure.
3. For timestamp parameters in

   query-advanced-domain-list

   , values are in milliseconds since epoch.