bailian-protocol Skill: Shared Rules for the Bailian bl CLI

Shared rules that every Bailian (Alibaba Cloud Model Studio) skill reads before it runs the bl command line tool.

Installs: 9.3K; on skills.sh
Stars: 367; on GitHub
Files: 5; besides SKILL.md
Updated: Nov 2026; last repo commit

bailian-protocol is not something you ask for directly. The Bailian skills read it first to learn how to work safely with the bl tool. It covers when to use Bailian at all, when to stop and ask you, how to check versions, how to sign in and how to report a CLI bug.

Install it as part of the whole Bailian skill set, because the other skills point to it with relative paths and stop if it is missing. It runs the bl command, so you need Node.js 18.17 or newer and a Bailian account.

Good for

Developers who use the Bailian CLI (bl) with Claude Code, Codex or another coding agent
Anyone who wants consent, cost and upgrade checks before an agent calls a paid cloud API
Users who hit a bl error and want it reported cleanly

Install bailian-protocol

Claude Code

Copy this prompt.

Install the bailian-protocol skill in Claude Code. Run this command:

npm install -g bailian-cli
bl skill init

Then check that it loaded and tell me how to use it.

2
Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js 18.17+.

bailian-protocol is the shared skill the other Bailian skills read, and it needs the bl command. bl skill init installs every bailian-* skill together with bailian-protocol, which is the supported route. Windows PowerShell: irm https://bailian.aliyun.com/cli/install.ps1 | iex. The skills CLI fallback targets every agent it finds, because of --all, and INSTALL.md pins version 1.5.18 for Node 18 support. The README does not say which agents bl skill init writes to, so check your skills folder afterwards.

From the project README. Source.

What's in the skill

When it loads

阿里云百炼 `bl` 家族共享执行协议（consent 确认、版本预检、鉴权/安装、错误上报、本地文件与输出约定）。不是面向用户意图的业务入口；当任一 bailian-* 业务 skill（bailian-cli / bailian-gen / bailian-finetune / bailian-managed-agent / bailian-sandbox / bailian-memory / bailian-knowledge / bailian-web-search）执行前需要公共上下文，或用户首次安装/鉴权/`bl` 报错需上报时读取本 skill。官方安装为整包：`bl skill init`（与业务 skill 同装）。

Sections in SKILL.md

Provider selection and consent
High-risk operation confirmation (mandatory)
Family routing & hand-offs
Call attribution (mandatory for every Agent bl command)
bash / zsh / Git Bash / WSL
PowerShell (Windows Codex default)
Owning skill
Version & updates (after provider selection, before the first bl command)
Setup & auth
Color output
Local files (mandatory)
Respond in the user's language
Summarize what you did
CLI errors: report an issue

Key facts

Author: Aliyun Model Studio CLI repo (modelstudioai/cli); its README calls the CLI "the official command-line interface for Aliyun Model Studio (DashScope) AI Platform"
License: Apache-2.0 (README badge and LICENSE file)
Installs on skills.sh: 9,253 (Nov 2, 2026)
GitHub stars: 367 for the whole modelstudioai/cli repo (Nov 2, 2026)
Last repo commit: Nov 1, 2026
Files in the folder: 6 files including SKILL.md: README.md, README.zh.md, assets/issue-reporting.md, assets/setup.md, assets/versioning.md
Needs: The bl command (npm package bailian-cli, Node.js 18.17+), the bailian-protocol skill and a Bailian API key or console login
Version in frontmatter: 2.7.2

What it includes

Sorts each request into 5 classes before any cloud call
Host-only answers never touch bl. Media generation recommends Bailian and asks once. Named-Bailian tasks run directly. Account queries and cloud knowledge ask which provider.
Provider selection and consent
Stops on risk: high or exit code 7 and never adds --yes by itself
The agent shows the risk and target, waits for your yes, then re-runs the same operation with --yes.
Runs code · High-risk confirmation
Points to 8 other bailian-* skills by intent
The skills are bailian-gen, bailian-finetune, bailian-managed-agent, bailian-sandbox, bailian-web-search, bailian-memory, bailian-knowledge and bailian-cli.
Family routing
Prefixes each agent-run bl command with four environment variables
They name the caller type, host, owning skill and skill version. Humans do not set them. --help and --version skip telemetry.
Runs code · Call attribution
Runs a 6-step check once per session before the first bl command
It compares skill and CLI versions, may run bl skill update, checks npm for a newer bailian-cli and asks before bl update.
Runs code · Version pre-flight
Installs bl and signs in with console login or an API key
Console login is recommended. Token Plan keys use bl auth login --api-key instead.
Runs code · Setup and auth
Passes local paths straight to commands, which upload them to temporary storage
The CLI uploads to DashScope temporary storage (oss://, 48 hours) automatically.
Network · Local files
Matches the reply language to the user's request language
For text chat the agent forces it with a system prompt.
Answer in your language
Adds a one-line summary of the bl commands used and the outcome
Only if a bl command actually ran.
Summarize what ran
Offers to file a redacted GitHub issue after you confirm
Secrets and business data are redacted, and the body is shown to you before submit.
Runs code · Report CLI bugs

From the official docs

Permissions

Medium risk

The skill sets up a CLI that signs in with your Alibaba Cloud key and can spend money or change cloud resources. Approve each command your agent proposes, and never let it add --yes for you.

What it can do

Read your data
Create and change things
Delete things
Read-only mode

Watch out for

It installs software and can pipe a script to bash
Setup runs npm install -g bailian-cli and bl skill init. The fallback is curl -fsSL https://bailian.aliyun.com/cli/install.sh | bash, or irm ... | iex on Windows. Prefer the npm route and read the script if you use the other. github.com
Pre-flight can update skills without asking
When the skill and CLI versions differ, the checklist runs bl skill update straight away. It asks you only before bl update. Declining the CLI upgrade is allowed. github.com
Commands carry usage attribution
Every bl command the agent runs is prefixed with variables naming the host, owning skill and version. The protocol says --help and --version skip telemetry. Ask the vendor what is recorded. github.com
It can file a public GitHub issue
On a CLI bug it drafts a redacted issue for github.com/modelstudioai/cli and shows you the body first. It submits only after you confirm. Check the body for private details. github.com
It steers media work toward Bailian
For image, video and speech tasks it recommends Bailian first and asks once. Say no if you want another provider. github.com
Some features are China-site only
The README says app orchestration, native MCP setup, training and deployment, account operations and plan onboarding are currently available only to China site (aliyun.com) account holders. Check your account type first. github.com

Technical details

Talks to	bailian.aliyun.com (install scripts). npm registry. DashScope API endpoints (dashscope.aliyuncs.com, dashscope-intl.aliyuncs.com). bailian.console.aliyun.com or modelstudio.console.alibabacloud.com (console login). github.com/modelstudioai/cli/issues (only after you confirm)
Sign-in and keys	Console login may create an ordinary API key; API keys can also be passed with bl auth login. The docs name ~/.bailian/config.json for console_site, and config Profiles hold api_key and base_url.
Scopes	Installs the bl CLI globally with npm or a vendor installer script Runs bl commands that call Alibaba Cloud APIs with your key Can run bl skill update and, after you agree, bl update Can open a public GitHub issue after you confirm

Questions

What is bailian-protocol?

It is the shared rulebook for the Bailian skill family. The other skills read it before they run the bl command. Its own description says it is not a business entry point for user requests.

How do I install it?

Use the install box above. The supported route is bl skill init, which installs every Bailian skill together. A subset install must name bailian-protocol or the others cannot find their rules.

Is it official?

It lives in the repo whose README calls itself "The official command-line interface for Aliyun Model Studio (DashScope) AI Platform". So this is the vendor's own repo. Check the repo owner yourself if that matters to you.

Do I need an account or API key?

Yes. The setup guide offers console login (recommended) or bl auth login --api-key. Token Plan and other subscription keys must use the API key route.

Does it cost money?

Bailian model calls can be billed by Alibaba Cloud. The protocol asks once before the first media call and treats risk: high commands as needing your confirmation. Check your plan and the billing docs.

Will it upgrade my tools without asking?

It asks before running bl update. It can run bl skill update by itself when the installed skill and CLI versions differ, according to the pre-flight checklist.

Does it work in the Claude app?

No tab for it. It needs the bl command and Node.js on your machine, so use Claude Code, Codex or another coding agent.

Is it safe?

It runs a global npm package and can run an installer script from the vendor site, and it sends your requests to Alibaba Cloud services. Read the safety box before you install on a work machine.

Information

updated Nov 2, 2026

Repository: modelstudioai/cli
Folder: skills/bailian-protocol

modelstudioai/cli skills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 6

Aliyun Model Studio CLI README · github.com
Aliyun Model Studio CLI INSTALL.md · github.com
bailian-protocol setup.md · github.com
bailian-protocol SKILL.md · github.com
bailian-protocol versioning.md · github.com
bailian-protocol issue-reporting.md · github.com