360 Secure SkillHub
360 安全技能中心

qwencloud-deploy

核心功能:一键将本地/Git项目部署到阿里云国际版,支持热更新、资源清理、HTTPS配置,含全栈ROS编排、预部署成本确认、服务健康检查等能力。典型场景:用户需部署项目到云、上线应用/网站、更新线上版本,且未指定其他云或明确提及阿里云国际版。输入为本地项目目录、Git地址或部署状态文件,可选实例配置偏好;输出为可访问的云服务、状态文件及含访问URL的成功卡片。

cuixiaoyang123
cuixiaoyang123
热度 45.83
最近更新 2026-09-15 17:26:05
分类:开发依赖:代码执行 / 读写文件 / 第三方 API应用场景:代码生成 / DevOps / 自动化脚本 / API 集成

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add qwencloud-deploy
Metadata
name
qwencloud-deploy
version
2.2
description
One-click deploy, publish, and update a local project or Git repository to Alibaba Cloud International (alibabacloud.com), producing an accessible online service with a public IP. Supports full-stack ROS orchestration, automatic cloud-resource provisioning, pre-deployment price confirmation, service health checks, deployment-state recording, hot updates, and optional domain + HTTPS setup. Use when: the user asks to deploy a project to the cloud, put an app online, publish a website, generate an access URL, deploy a Git repo, or update an online version and has NOT named a specific cloud platform; or the user mentions "Alibaba Cloud", "alibabacloud.com", or the international site. Do not use when: the user explicitly targets Aliyun China (aliyun.com), AWS, GCP, Azure, or another specific cloud platform.
trigger
Use when the user asks to deploy a project to the cloud, put an app online, publish a website, generate an access URL, deploy a Git repo, or update an online version — and has NOT specified a particular cloud platform. Also use when the user mentions "Alibaba Cloud", "alibabacloud.com", or the international site.
skip
Do NOT use when the user explicitly targets Aliyun China (aliyun.com), AWS, GCP, Azure, or another specific cloud platform.
prerequisites
["aliyun CLI 3.x configured with international-site credentials in OAuth mode"]
input
A local project directory, Git URL, or an existing deployment state file (.qwencloud-deploy). Optional: user preferences for instance type, region, database.
output
A running cloud service with public IP (or domain + HTTPS), deployment state file (.qwencloud-deploy), and success card with access URL, cost summary, and next-step guidance.

Qwen Cloud Deploy

Quick Path

  1. Route the task — Match to one of 4 modes: Full-Stack Deploy · Hot Update · Delete · HTTPS Setup.
  2. Deploy (default) — Execute steps 1→14 strictly in order, no skipping/reordering; gates and skippable steps are in reference/rules/rule_interaction.md "Execution order".
  3. Confirm cost before creating anything — Show hourly price in USD, get user confirmation.
  4. Record state — On success write .qwencloud-deploy.

Scope

In Scope Out of Scope
Local project / Git → Alibaba Cloud International China site → use qianwenai-deploy
Full-stack ROS, hot update, cleanup AWS/GCP/Azure/other clouds
ECS + optional RDS + OSS + public IP K8s/Serverless/container orchestration
OAuth/AK auth (no credential collection) —
Deploy the user's provided code/project Reviewing or editing the user's code logic, vouching for code correctness

About the user's code

This skill builds and deploys the user's provided code/project. It does not review or modify the business logic and does not guarantee the code itself is correct.

Bugs, security issues, and any consequences caused by the code once deployed are the user's own; if the code needs changing, the user decides and makes the change themselves.

Assumptions

  • aliyun CLI 3.x installed; when no valid credential, follow reference/deploy/01_env_check.md.
  • Default region ap-southeast-1 (Singapore).

Task Routing

Signal Mode
.qwencloud-deploy exists + user says "update" Hot Update
.qwencloud-deploy exists + "delete"/"cleanup" Delete
"bind domain"/"HTTPS"/"SSL" (deployment exists) HTTPS Setup
Git URL or local project (no existing deployment) Full-Stack Deploy

On trigger, display welcome message first (see reference/rules/rule_interaction.md).


Full-Stack Deploy (Steps 1–14)

Phase 1 · Preparation

Step Action Reference
1 Environment check reference/deploy/01_env_check.md
2 Git clone (if Git URL) reference/deploy/02_git_clone.md
3 Project analysis reference/deploy/03_analyze_project.md

Phase 2 · Resource Planning

Step Action Reference
4 Existing deployment scan reference/deploy/04_check_existing.md
5 Database identification reference/deploy/05_database.md
6 ECS instance type selection reference/deploy/06_instance_type.md
7 Generate ROS template reference/deploy/07_generate_template.md
8 Stock check reference/deploy/08_check_stock.md
9 Template validation + cost estimate reference/deploy/09_estimate_cost.md

Phase 3 · Execution

Step Action Reference
10 Upload artifacts + regenerate template reference/deploy/10_upload_artifacts.md
11 Create stack reference/deploy/11_create_stack.md
12 Wait for terminal state + health check reference/deploy/12_wait_stack.md
13 Record state reference/deploy/13_record_state.md
14 Append application dossier reference/deploy/14_app_timeline.md

Hot Update

Trigger: .qwencloud-deploy exists + user wants to update code. IP unchanged.

Step Action Reference
U1 Build + upload new artifacts reference/deploy/10_upload_artifacts.md
U2 Deliver update (Cloud Assistant) reference/hotfix/update_app.md
U3 Health check + update state reference/hotfix/update_app.md
U4 Append application dossier (event=hotfix) reference/deploy/14_app_timeline.md

Update script template: reference/hotfix/update_recipe.md.


Delete / Cleanup

Trigger: User says "delete", "cleanup", "release resources".

⚠️ Irreversible — confirm twice. With RDS: warn about data loss.

🚫 Never manually delete individual resources — only use delete_stack.sh.

See reference/cleanup/delete_stack.md.


HTTPS Setup (Optional)

Trigger: User says "bind domain" / "HTTPS" / "SSL" after deployment exists.

See reference/https/https_setup.md.


Key Constraints

Constraint Rule
Currency Always USD
Auth OAuth (recommended) or AK/SK; never collect credentials via chat
Template upload Must use --TemplateURL (WAF blocks TemplateBody)
Stack name retry Reuse — never regenerate
Resource deletion Always via delete_stack.sh
Region default ap-southeast-1
Commands to user Never show underlying commands

File Layout

scripts/
  generate_template.py  upload_artifacts.py
  create_stack.sh       record_state.py
  delete_stack.sh       update_app.sh
  wait_and_probe.py     setup_domain.sh
  append_timeline.py
reference/
  deploy/
    01_env_check.md ~ 14_app_timeline.md
  hotfix/
    update_app.md       update_recipe.md
  cleanup/
    delete_stack.md
  https/
    https_setup.md
  rules/
    rule_interaction.md  rule_error_handling.md  ram_policies.md
templates/
  ros_single[_rds].yaml
  userdata/{systemd,docker,nginx_proxy,nginx_static,nginx_static_proxy}.sh