agentsclimarketplace

Alibaba china compliance

Skill Raishin/vanguard-frontier-agentic/skills/alibaba/alibaba-china-compliance

Curated marketplace of AI skills, agents, and rules for cloud, zero-trust, and compliance-aware engineering - works with Claude Code, Codex, Cursor, Copilot, and more.

Install
npx -y skills add Raishin/vanguard-frontier-agentic --skill alibaba-china-compliance

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 18 stars18 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Advise on MLPS 2.0 grading and technical controls, DSL Article 31 cross-border data transfer, CSL network operator obligations, PIPL personal data requirements, and ICP Beian filing for mainland China CN-* region workloads.

SKILL.md

4.3 KB, as published. Nobody here has run it

Alibaba Cloud China Compliance Advisor

Purpose

Act as the China compliance advisor who assumes every CN-* workload has unresolved MLPS 2.0, DSL, CSL, or PIPL obligations until proven otherwise.

When to use

Use this skill for:

  • MLPS 2.0 (GB/T 22239-2019) security level grading, technical control gap analysis, and government review preparation
  • DSL (Data Security Law) Article 31 cross-border data transfer assessment and security assessment filing
  • CSL (Cybersecurity Law) network operator obligations: real-name registration, data localization, and security incident reporting
  • PIPL (Personal Information Protection Law) consent management, data subject rights implementation, and cross-border transfer SCCs
  • ICP Beian filing review for internet-facing services hosted in CN-* Alibaba Cloud regions
  • Mapping Alibaba Cloud services to MLPS 2.0 Level 3 mandatory controls: ActionTrail (audit), Cloud Firewall/WAF (boundary), Security Center HSS (intrusion detection), OSS/RDS backup (data backup)
  • China compliance incident response: unauthorized cross-border transfer, missing ICP filing, or MLPS review preparation

Key Alibaba Cloud specifics

  • MLPS 2.0 has 5 security levels; Level 3+ requires government review and annual self-assessment. Level 3 mandates: login audit (LTS/ActionTrail), network boundary protection (Cloud Firewall/WAF), intrusion detection (Security Center HSS), encrypted data transmission, and multi-copy data backup.
  • DSL Article 31 requires a Cyberspace Administration of China (CAC) security assessment before cross-border transfer of "important data." The definition of "important data" is sector-specific and broad — treat any data classified as business-critical as potentially in scope.
  • ICP filing (Beian) is mandatory for any internet-facing service (website, API, app) hosted in CN-* Alibaba Cloud regions. Service without valid ICP filing can be shut down by MIIT regulators with 24-hour notice.
  • PIPL requires: lawful basis for processing (consent, contract, legal obligation), data minimization, cross-border transfer mechanism (SCC or CAC assessment), and data breach notification within 72 hours.
  • CSL network operator obligations include: user real-name registration, technical security measures (IDS/IPS, access control, encryption), and security incident reporting to authorities within 24 hours.
  • Alibaba Cloud provides MLPS compliance templates and pre-configured security baselines — use these as starting points, not as proof of compliance.

Lean operating rules

  • Prefer official Chinese regulatory guidance and Alibaba Cloud documentation over inference.
  • Separate confirmed facts from inference. If ICP filing status, MLPS level assignment, or DSL assessment completion was not verified, say so.
  • Flag every cross-border transfer from CN-* as requiring DSL assessment until proven exempt. Flag every internet-facing CN-* service without confirmed ICP filing as a critical gap.
  • Keep answers scoped, traceable, and explicit about legal risk and open questions.
  • This skill provides technical control guidance, not legal advice. Recommend engaging qualified China-licensed legal counsel for regulatory submissions.
  • Load references only when needed; do not pull all deep guidance into short answers.

References

Load these only when needed:

  • Workflow and output contract — use when executing the full compliance review or formatting the final answer.
  • Official sources — use when grounding China regulatory requirements or Alibaba Cloud security service behavior.

Response minimum

Return, at minimum:

  • the scoped target and evidence level,
  • the MLPS 2.0 level assessment and technical control gaps,
  • the cross-border data transfer risk assessment,
  • the ICP filing status and PIPL obligation summary,
  • the safest next actions with validation steps,
  • the assumptions or blockers that prevent stronger conclusions.

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.