360 Secure SkillHub
360 安全技能中心

qwencloud-deploy

面向阿里云国际站的部署编排 Skill:分析项目后选择实例与数据库,生成 ROS 模板并上传构建产物,创建云资源栈,等待终态并做健康检查,记录部署状态;另支持代码热更新、资源删除和可选域名加 HTTPS 配置。

cuixiaoyang123
cuixiaoyang123
热度 45.78
最近更新 2026-09-15 17:26:05
分类:自动化依赖:代码执行 / 第三方 API / 读写文件应用场景:DevOps / 自动化脚本 / 工作流 / API 集成

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add qwencloud-deploy
Metadata
name
qwencloud-deploy
version
2.2
description
One-click deploy, publish, and update a local project or Git repository to Alibaba Cloud International (alibabacloud.com), producing an accessible online service with a public IP. Supports full-stack ROS orchestration, automatic cloud-resource provisioning, pre-deployment price confirmation, service health checks, deployment-state recording, hot updates, and optional domain + HTTPS setup. Use when: the user asks to deploy a project to the cloud, put an app online, publish a website, generate an access URL, deploy a Git repo, or update an online version and has NOT named a specific cloud platform; or the user mentions "Alibaba Cloud", "alibabacloud.com", or the international site. Do not use when: the user explicitly targets Aliyun China (aliyun.com), AWS, GCP, Azure, or another specific cloud platform.
trigger
Use when the user asks to deploy a project to the cloud, put an app online, publish a website, generate an access URL, deploy a Git repo, or update an online version — and has NOT specified a particular cloud platform. Also use when the user mentions "Alibaba Cloud", "alibabacloud.com", or the international site.
skip
Do NOT use when the user explicitly targets Aliyun China (aliyun.com), AWS, GCP, Azure, or another specific cloud platform.
prerequisites
["aliyun CLI 3.x configured with international-site credentials in OAuth mode"]
input
A local project directory, Git URL, or an existing deployment state file (.qwencloud-deploy). Optional: user preferences for instance type, region, database.
output
A running cloud service with public IP (or domain + HTTPS), deployment state file (.qwencloud-deploy), and success card with access URL, cost summary, and next-step guidance.

Qwen Cloud Deploy

Quick Path

  1. Route the task — Match to one of 4 modes: Full-Stack Deploy · Hot Update · Delete · HTTPS Setup.
  2. Deploy (default) — Execute steps 1→14 strictly in order, no skipping/reordering; gates and skippable steps are in reference/rules/rule_interaction.md "Execution order".
  3. Confirm cost before creating anything — Show hourly price in USD, get user confirmation.
  4. Record state — On success write .qwencloud-deploy.

Scope

In Scope Out of Scope
Local project / Git → Alibaba Cloud International China site → use qianwenai-deploy
Full-stack ROS, hot update, cleanup AWS/GCP/Azure/other clouds
ECS + optional RDS + OSS + public IP K8s/Serverless/container orchestration
OAuth/AK auth (no credential collection) —
Deploy the user's provided code/project Reviewing or editing the user's code logic, vouching for code correctness

About the user's code

This skill builds and deploys the user's provided code/project. It does not review or modify the business logic and does not guarantee the code itself is correct.

Bugs, security issues, and any consequences caused by the code once deployed are the user's own; if the code needs changing, the user decides and makes the change themselves.

Assumptions

  • aliyun CLI 3.x installed; when no valid credential, follow reference/deploy/01_env_check.md.
  • Default region ap-southeast-1 (Singapore).

Task Routing

Signal Mode
.qwencloud-deploy exists + user says "update" Hot Update
.qwencloud-deploy exists + "delete"/"cleanup" Delete
"bind domain"/"HTTPS"/"SSL" (deployment exists) HTTPS Setup
Git URL or local project (no existing deployment) Full-Stack Deploy

On trigger, display welcome message first (see reference/rules/rule_interaction.md).


Full-Stack Deploy (Steps 1–14)

Phase 1 · Preparation

Step Action Reference
1 Environment check reference/deploy/01_env_check.md
2 Git clone (if Git URL) reference/deploy/02_git_clone.md
3 Project analysis reference/deploy/03_analyze_project.md

Phase 2 · Resource Planning

Step Action Reference
4 Existing deployment scan reference/deploy/04_check_existing.md
5 Database identification reference/deploy/05_database.md
6 ECS instance type selection reference/deploy/06_instance_type.md
7 Generate ROS template reference/deploy/07_generate_template.md
8 Stock check reference/deploy/08_check_stock.md
9 Template validation + cost estimate reference/deploy/09_estimate_cost.md

Phase 3 · Execution

Step Action Reference
10 Upload artifacts + regenerate template reference/deploy/10_upload_artifacts.md
11 Create stack reference/deploy/11_create_stack.md
12 Wait for terminal state + health check reference/deploy/12_wait_stack.md
13 Record state reference/deploy/13_record_state.md
14 Append application dossier reference/deploy/14_app_timeline.md

Hot Update

Trigger: .qwencloud-deploy exists + user wants to update code. IP unchanged.

Step Action Reference
U1 Build + upload new artifacts reference/deploy/10_upload_artifacts.md
U2 Deliver update (Cloud Assistant) reference/hotfix/update_app.md
U3 Health check + update state reference/hotfix/update_app.md
U4 Append application dossier (event=hotfix) reference/deploy/14_app_timeline.md

Update script template: reference/hotfix/update_recipe.md.


Delete / Cleanup

Trigger: User says "delete", "cleanup", "release resources".

⚠️ Irreversible — confirm twice. With RDS: warn about data loss.

🚫 Never manually delete individual resources — only use delete_stack.sh.

See reference/cleanup/delete_stack.md.


HTTPS Setup (Optional)

Trigger: User says "bind domain" / "HTTPS" / "SSL" after deployment exists.

See reference/https/https_setup.md.


Key Constraints

Constraint Rule
Currency Always USD
Auth OAuth (recommended) or AK/SK; never collect credentials via chat
Template upload Must use --TemplateURL (WAF blocks TemplateBody)
Stack name retry Reuse — never regenerate
Resource deletion Always via delete_stack.sh
Region default ap-southeast-1
Commands to user Never show underlying commands

File Layout

scripts/
  generate_template.py  upload_artifacts.py
  create_stack.sh       record_state.py
  delete_stack.sh       update_app.sh
  wait_and_probe.py     setup_domain.sh
  append_timeline.py
reference/
  deploy/
    01_env_check.md ~ 14_app_timeline.md
  hotfix/
    update_app.md       update_recipe.md
  cleanup/
    delete_stack.md
  https/
    https_setup.md
  rules/
    rule_interaction.md  rule_error_handling.md  ram_policies.md
templates/
  ros_single[_rds].yaml
  userdata/{systemd,docker,nginx_proxy,nginx_static,nginx_static_proxy}.sh