The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to download the hcloud (KooCLI) installer from https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh. This is a resource hosted on the vendor's official domain.
[REMOTE_CODE_EXECUTION]: Instructions in SKILL.md include downloading a shell script from the official vendor repository and pipe-executing it via bash to install the Huawei Cloud CLI tool.
[COMMAND_EXECUTION]: The skill uses subprocess.run within hcloud_runner.py and special_ops.py to execute hcloud and kubectl commands. This functionality is necessary for its primary purpose of managing cloud infrastructure resources.
[CREDENTIALS_UNSAFE]: The skill processes sensitive Huawei Cloud AK/SK credentials. It includes security logic to check for existing CLI configurations and environment variables, attempting to avoid passing keys as plaintext arguments to prevent exposure in process listings like ps aux.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted metadata from cloud API responses which are interpolated into the agent context.
Ingestion points: API responses from ListClusters, ListNodes, and other query tools in dispatcher.py and special_ops.py.
Boundary markers: Absent in the skill's instructional body.
Capability inventory: High-privilege actions including cluster deletion, node resizing, and credential management are available via the huawei-cloud.py entry point.
Sanitization: Data is validated as valid JSON but not sanitized for natural language instruction patterns.

huawei-cloud-cce-cluster-management