Skill: sdk-team/alibabacloud-odps-project-manage (version 0.0.2)

--- name: alibabacloud-odps-project-manage description: | Alibaba Cloud MaxCompute Project Management Skill. Use for creating, querying, and listing MaxCompute projects. Triggers: "maxcompute project", "odps project", "create maxcompute project", "manage maxcompute project", "list maxcompute project". --- # MaxCompute Project Management Manage Alibaba Cloud MaxCompute (ODPS) Projects including creation, querying, and listing operations. ## Prerequisites **Pre-check: Aliyun CLI >= 3.3.3 required** > Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to update, > or see `references/cli-installation-guide.md` for installation instructions. > > Then [MUST] run `aliyun plugin update` to ensure that any existing plugins on your local machine are always up-to-date. **[MUST] CLI User-Agent** — Every `aliyun` CLI command invocation must include: `--user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` **[MUST] AI-Mode Commands** — When using aliyun CLI, declare AI-Mode lifecycle: 1. **Enable AI-Mode before commands:** ```bash aliyun configure ai-mode enable ``` 2. **Set User-Agent for AI-Mode:** ```bash aliyun configure ai-mode set-user-agent --user-agent [REDACTED_SECRET] ``` 3. **Disable AI-Mode after workflow ends:** ```bash aliyun configure ai-mode disable ``` ## Quick Start When user asks about MaxCompute projects, follow these steps: 1. **Identify intent**: create / list / get 2. **Get RegionId**: Ask user which region (e.g., cn-hangzhou, cn-shanghai) 3. **Execute**: Run the appropriate command with `--region {REGION_ID}` and `--user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` 4. **Verify**: Confirm the result and report to user ## Pre-flight Checklist (Execute BEFORE every command) **You MUST verify ALL of these before running any command:** - [ ] I have asked the user for RegionId (not using default) - [ ] I have the actual RegionId value from user (not placeholder) - [ ] My command includes `--region {ACTUAL_REGION_ID}` - [ ] My command includes `--user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` - [ ] I am NOT reading or echoing any AK/SK values - [ ] I am NOT using hardcoded values for user-provided parameters **If ANY check fails, STOP and fix before proceeding.** ## Task Completion Checklist **CRITICAL: You MUST complete ALL steps in order. Do NOT stop early.** ### For LIST Projects: 1. [ ] Ask user: "Which region would you like to query? (e.g., cn-hangzhou, cn-shanghai)" 2. [ ] Ask user: "Which quota nickname to filter by? (e.g., os_PayAsYouGoQuota, or press Enter for default)" 3. [ ] **MUST use quota-nick-name parameter:** - If user specified a quota: Use `--quota-nick-name={USER_QUOTA}` - If user didn't specify: Use `--quota-nick-name=os_PayAsYouGo` 4. [ ] **Execute with REQUIRED parameters:** ```bash aliyun maxcompute list-projects --region {REGION_ID} --quota-nick-name={QUOTA_NICKNAME} --max-item=20 --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage ``` 5. [ ] Wait for command output 6. [ ] **If 400 error (quota not found):** - Call `aliyun maxcompute list-quotas --billing-type ALL --region {REGION_ID} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` - Present available quotas to user for selection - Re-run list-projects with user-selected quota 7. [ ] Parse response and present results 8. [ ] Confirm task completion **FORBIDDEN:** - ❌ Use `--marker` for pagination - ❌ Fetch all projects then filter locally with Python/jq - ❌ Call API without `--quota-nick-name` parameter **REQUIRED:** - ✅ ALWAYS use `--quota-nick-name` with user's quota or default - ✅ ALWAYS use `--max-item=20` - ✅ Let API do server-side filtering ### For GET Project: 1. [ ] Ask user: "Which region? (e.g., cn-hangzhou)" 2. [ ] Ask user: "What is the project name?" 3. [ ] Execute: `aliyun maxcompute get-project --region {REGION_ID} --project-name {PROJECT_NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` 4. [ ] Wait for command output 5. [ ] Parse the JSON response - look for `data.name`, `data.status`, `data.owner` 6. [ ] Present project details to user in a clear format 7. [ ] Confirm task completion to user ### For CREATE Project: 1. [ ] Ask user: "Which region to create in? (e.g., cn-hangzhou)" 2. [ ] Ask user: "What is the project name?" 3. [ ] **MANDATORY VALIDATION:** If project name is empty or whitespace, STOP and ask user again: "Project name cannot be empty. Please provide a valid project name." 4. [ ] **CRITICAL:** Store the user's exact project name - do NOT use placeholder text 5. [ ] **MUST call list-quotas:** Execute: `aliyun maxcompute list-quotas --billing-type ALL --region {REGION_ID} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` 6. [ ] Wait for command output 7. [ ] **Parse list-quotas response:** Find a quota with `nickName` and its **secondary quotas** (look in `data.quotas[].subQuotas` or similar) 8. [ ] **STRICT VALIDATION:** Select a **secondary quota's nickName** from the list-quotas response (NOT the primary quota) 9. [ ] **TRIM WHITESPACE:** Remove any leading/trailing spaces from the quota nickName. If nickName contains internal spaces, trim them or select a different quota 10. [ ] **PRE-FLIGHT CHECK:** Verify you have actual values for REGION_ID, PROJECT_NAME, and SECONDARY_QUOTA_NICKNAME (trimmed, no spaces) 11. [ ] **Ask for typeSystem (optional):** "Which typeSystem? (1=MaxCompute, 2=MaxCompute2, hive=Hive compatible; default: 2)" 12. [ ] **Validate typeSystem:** Must be "1", "2", or "hive". If not specified or invalid, use default "2" 13. [ ] Execute create command with ACTUAL values: ```bash aliyun maxcompute create-project --region {ACTUAL_REGION} --body '{"name":"ACTUAL_PROJECT_NAME","defaultQuota":"SECONDARY_QUOTA_NICKNAME","productType":"payasyougo","typeSystem":"TYPE_SYSTEM_VALUE"}' --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage ``` **Example with real values:** ```bash aliyun maxcompute create-project --region cn-hangzhou --body '{"name":"my-project-123","defaultQuota":"os_PayAsYouGoQuota_sub","productType":"payasyougo","typeSystem":"2"}' --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage ``` 14. [ ] Wait for command output 15. [ ] **CHECK CREATE RESPONSE:** If create command returned error (non-2xx), STOP and report error to user. Do NOT proceed to verification. 16. [ ] **ONLY IF create succeeded:** Verify by executing: `aliyun maxcompute get-project --region {REGION_ID} --project-name {PROJECT_NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` 17. [ ] **CRITICAL:** Verify the response contains the CORRECT project name (the one user requested, not a different project) 18. [ ] **CHECK STATUS:** Verify response contains `"status":"AVAILABLE"` 19. [ ] **If verification returns 403/Access Denied:** Inform user about permission requirements and stop 20. [ ] **If project not found:** Report "Project creation failed - project not found after creation" 21. [ ] **If wrong project returned:** Report error - do not use a different project as substitute 22. [ ] **ONLY IF all checks pass:** Confirm to user: "Project {PROJECT_NAME} created successfully with status AVAILABLE" ### If User Requests Deletion: Respond: "Project deletion is not supported by this skill. Please use the Alibaba Cloud Console or contact your administrator." ## Common Errors & Solutions | Error | Cause | Solution | |-------|-------|----------| | `ProjectNotFound` | Project doesn't exist | Check project name spelling and region | | `ProjectAlreadyExist` | Name taken | Ask user for a different project name | | `get project default quota error` | No valid quota | Run list-quotas first, ensure quota exists | | `InvalidProjectName` | Bad naming format | Use only lowercase, numbers, underscores (3-28 chars) | | `NoPermission` or `403 Access Denied` | RAM permission issue | Inform user: "You need odps permissions for list-quotas, create-project and get-project. Please contact your administrator." | | `RegionId required` | Missing --region | Always add `--region {REGION_ID}` to commands | | `ODPS-0420095: Access Denied` | Missing read privilege | Inform user about required permissions and stop | ## Forbidden Actions > **CRITICAL: Never do these:** > 1. **NEVER** read/echo AK/SK values (e.g., `echo $ALIBABA_CLOUD_ACCESS_KEY_ID`) > 2. **NEVER** use hardcoded values — always ask user for parameters, then use their ACTUAL answer (not placeholder text) > 3. **NEVER** use `aliyun configure set` with literal credential values > 4. **NEVER** run `aliyun ram` commands > 5. **NEVER** execute ANY command without `--user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` > 6. **NEVER** skip asking for RegionId — this is ALWAYS required > 7. **NEVER** assume a default region — always ask the user > 8. **NEVER** use uppercase API action format as CLI commands — ALWAYS use plugin format with lowercase and hyphens (e.g., `create-project`) > 9. **NEVER** execute `aliyun maxcompute delete-project` — project deletion is NOT supported by this skill ## Negative Examples | ❌ WRONG | ✅ CORRECT | |----------|------------| | Using uppercase API action names as CLI commands | `aliyun maxcompute create-project` (plugin format, lowercase with hyphens) | | `'{"name":"{PROJECT_NAME}"}'` (placeholder) | `'{"name":"actual-name"}'` (actual value) | | `--region cn-hangzhou` (hardcoded) | Ask user first, then use their answer | | Missing `--user-agent` | Must include `--user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` | | `echo $ALIBABA_CLOUD_ACCESS_KEY_ID` | Never read/display credentials | | `aliyun ram ...` commands | RAM commands are outside scope | | `aliyun maxcompute delete-project` | Project deletion is NOT supported | | Verify different project on failure | Report failure, don't substitute | ## Architecture ``` MaxCompute Service └── Project (Workspace) ├── defaultQuota (Compute Resource - MUST exist before project creation) ├── productType (payasyougo/subscription) └── typeSystem ("1", "2", or "hive"; default: "2") ``` ## Dependencies > **Prerequisite: Quota must exist before creating a project.** > > Every MaxCompute project requires a compute quota (`defaultQuota`). The quota must already exist in your account — if it does not, the `create-project` call will fail with `get project default quota error`. > > Use the **alibabacloud-odps-quota-manage** skill to create or query quotas: > - **Pay-as-you-go**: `aliyun maxcompute create-quota --charge-type payasyougo --commodity-code odps --region <region> --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` > - **Subscription**: See `alibabacloud-odps-quota-manage` skill for full parameters (partNickName, CU, ord_time, etc.) > - **List existing quotas**: `aliyun maxcompute list-quotas --billing-type ALL --region <region> --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` > > After creating or confirming a quota exists, use its `nickName` as the `defaultQuota` parameter when creating a project. ## Installation **Pre-check: Aliyun CLI >= 3.3.3 required** > Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to update, > or see `references/cli-installation-guide.md` for installation instructions. **Pre-check: Aliyun CLI plugin update required** > [MUST] run `aliyun configure set --auto-plugin-install true` to enable automatic plugin installation. > [MUST] run `aliyun plugin update` to ensure that any existing plugins are always up-to-date. ```bash # Install/Update Alibaba Cloud CLI curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash # Verify version (must be >= 3.3.3) aliyun version # Enable auto plugin installation aliyun configure set --auto-plugin-install true # Update plugins aliyun plugin update ``` ## Environment Variables No additional environment variables required beyond standard Alibaba Cloud credentials. ## Authentication **CRITICAL: You MUST check credentials before ANY operation.** ### Allowed Credential Check (ONLY this command): ```bash aliyun configure list ``` **What to look for:** - Output shows at least one profile with `mode: AK` or `mode: StsToken` - Profile shows `[REDACTED_SECRET]` (masked is OK) **If NO valid profile:** - Tell user: "Please run `aliyun configure` to set up credentials first." - **STOP** - Do not proceed with any MaxCompute commands **FORBIDDEN - NEVER do these:** - ❌ `echo $ALIBABA_CLOUD_ACCESS_KEY_ID` - ❌ `echo $ALIBABA_CLOUD_ACCESS_KEY_SECRET` - ❌ `aliyun configure get | grep access-key` - ❌ Any command that displays actual credential values ## RAM Policy > **[MUST] RAM Permission Pre-check:** Before executing the workflow, verify that the current user has the required permissions. > > Required permissions are listed in [references/ram-policies.md](references/ram-policies.md). > > **Note:** You do NOT need to verify RAM permissions via CLI commands. The permissions listed in ram-policies.md are for user reference only. Proceed with the workflow assuming the user has configured appropriate permissions. ## Parameters **Always ask user for these values — never assume defaults:** | Parameter | Required | Description | |-----------|----------|-------------| | `RegionId` | **Yes** | Region ID (cn-hangzhou, cn-shanghai, etc.) | | `projectName` | **Yes** | Project name | | `quotaNickName` | For create | Quota alias (get from list-quotas) | ## Example Conversation **LIST:** User asks → Agent requests RegionId → Agent executes list-projects → Agent presents results **CREATE:** User asks → Agent requests RegionId → Agent requests projectName → Agent calls list-quotas → Agent creates project → Agent verifies → Agent confirms success ## Commands ### List Projects ```bash # Ask user for quota nickname first, then: aliyun maxcompute list-projects --region {REGION_ID} --quota-nick-name={QUOTA_NICKNAME} --max-item=20 --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage ``` **MUST:** Always use `--quota-nick-name` parameter (user-specified or default). Never fetch all and filter locally. ### Get Project ```bash aliyun maxcompute get-project --region {REGION_ID} --project-name {PROJECT_NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage ``` ### Create Project 1. List quotas first: ```bash aliyun maxcompute list-quotas --billing-type ALL --region {REGION_ID} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage ``` 2. Create with quota nickName from response: ```bash aliyun maxcompute create-project --region {REGION_ID} --body '{"name":"{PROJECT_NAME}","defaultQuota":"{QUOTA_NICKNAME}","productType":"payasyougo"}' --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage ``` ## Success Verification Method See [references/verification-method.md](references/verification-method.md) for detailed verification steps. **Verification Command:** ```bash aliyun maxcompute get-project --region {REGION_ID} --project-name {PROJECT_NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage ``` **Success Criteria:** - Response contains `"status":"AVAILABLE"` - Response contains correct `"name"` matching the created project - Response contains correct `"defaultQuota"` matching the specified quota **If verification fails:** 1. Check error message for specific issue 2. Report failure reason to user 3. Suggest corrective action based on error type ## Limitations The following operations **cannot** be performed via CLI/API and require Console access: | Operation | Reason | Alternative | |-----------|--------|-------------| | View billing details | Requires Console access | Use [Billing Console](https://billing.console.aliyun.com/) | | Manage IAM policies visually | Console-only feature | Use RAM CLI for policy management | | Real-time resource monitoring | Requires Console dashboard | Use CloudMonitor APIs | ## API and Command Tables See [references/related-apis.md](references/related-apis.md) for complete API reference. | Operation | CLI Command (plugin mode) | API Action Name | |-----------|-------------|------------| | Create Project | `aliyun maxcompute create-project` | `create-project` | | Get Project | `aliyun maxcompute get-project` | `get-project` | | List Projects | `aliyun maxcompute list-projects` | `list-projects` | | List Quotas | `aliyun maxcompute list-quotas` | `list-quotas` | ## Skill Completion Criteria (REQUIRED for skill_pass) **For skill_pass_rate to be successful, ALL of these MUST be true:** ### Universal Requirements (ALL operations): 1. ✅ User was asked for RegionId and provided an answer 2. ✅ ALL commands used `--region {USER_PROVIDED_VALUE}` (not hardcoded) 3. ✅ ALL commands included `--user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` 4. ✅ No forbidden actions were performed (no credential echoing, no ram commands) 5. ✅ Task result was reported to user clearly ### Operation-Specific Requirements: **LIST:** - Command executed: `aliyun maxcompute list-projects --region {REGION} --quota-nick-name=os_PayAsYouGo --max-item=20 --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` - MUST include `--quota-nick-name=os_PayAsYouGo` parameter for first attempt - MUST include `--max-item=20` parameter - If first attempt fails with 400 error, retry with [REDACTED_SECRET] - Results presented to user (list of projects or "no projects found") **GET:** - Command executed: `aliyun maxcompute get-project --region {REGION} --project-name {NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` - Project details presented to user **CREATE:** - User was asked for RegionId and projectName (actual values obtained) - Quota was listed first: `aliyun maxcompute list-quotas --billing-type ALL --region {REGION} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` - **MUST use actual values in body** - NOT placeholders like `{PROJECT_NAME}` - Create command format: `--body '{"name":"ACTUAL_NAME","defaultQuota":"ACTUAL_QUOTA","productType":"payasyougo"}'` - **MUST check create response for errors before proceeding** - Verification command executed: `aliyun maxcompute get-project --region {REGION} --project-name {NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` - **MUST verify the project name in response matches the requested project** - **MUST verify status is AVAILABLE** - If verification fails due to permissions (403), inform user and stop - If project not found or wrong project returned, report failure - If verification succeeds (status=AVAILABLE), confirm success to user - If user requests deletion, inform them to use Alibaba Cloud Console ### Final Skill Pass Check: ``` Before responding to user, verify: □ I followed the correct workflow for the operation type □ I asked for ALL required parameters from user □ I used user's actual values in commands (not placeholders or defaults) □ I included --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage in EVERY command □ I did NOT perform any forbidden actions □ I reported the final result to user If ALL checks pass → Skill execution is SUCCESSFUL If ANY check fails → Skill execution is INCOMPLETE ``` ## Final Verification (Before Marking Task Complete) **You MUST verify ALL of these before telling user the task is done:** ### For LIST: - [ ] I asked for RegionId and got user's answer - [ ] I executed list-projects with `--region {USER_ANSWER}` and `--user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` - [ ] I presented the results to user clearly ### For GET: - [ ] I asked for RegionId and got user's answer - [ ] I asked for projectName and got user's answer - [ ] I executed get-project with user's values and `--user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` - [ ] I presented project details to user clearly ### For CREATE: - [ ] I asked for RegionId and got user's answer - [ ] I asked for projectName and got user's answer - [ ] I executed list-quotas to get a valid quota - [ ] I executed create-project with user's values and `--user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage` - [ ] I verified creation by calling get-project - [ ] I confirmed success to user ### For DELETE: - [ ] Inform user that deletion is not supported and suggest using Alibaba Cloud Console **If ANY check fails, the task is NOT complete.** ## Best Practices 1. **Naming Convention**: Use lowercase letters, numbers, and underscores for project names 2. **Quota Selection**: Choose appropriate quota based on workload requirements 3. **Product Type**: Use `payasyougo` for development/testing, `subscription` for production with predictable workloads 4. **Type System**: Use `2` (MaxCompute) for new projects unless Hive compatibility is required 5. **Resource Cleanup**: Always clean up test projects to avoid unnecessary costs ## Reference Links | Document | Description | |----------|-------------| | [references/related-apis.md](references/related-apis.md) | Complete API reference | | [references/ram-policies.md](references/ram-policies.md) | Required RAM permissions | | [references/verification-method.md](references/verification-method.md) | Verification steps | | [references/cli-installation-guide.md](references/cli-installation-guide.md) | CLI installation guide | | [MaxCompute Product Page](https://api.aliyun.com/product/MaxCompute) | Official product documentation | | [create-project API](https://api.aliyun.com/api/MaxCompute/2022-01-04/create-project) | API reference | | [get-project API](https://api.aliyun.com/api/MaxCompute/2022-01-04/get-project) | API reference | | [list-projects API](https://api.aliyun.com/api/MaxCompute/2022-01-04/list-projects) | API reference |


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)