The Agent Skills Directory

[COMMAND_EXECUTION]: The bundled CLI tool in scripts/cli/cli_entry.py uses subprocess.run to execute hcloud commands. This is protected by a strict whitelist that only allows the hcloud executable and validates all arguments against a safe character set ([A-Za-z0-9_\-.,:=/{}@]) to prevent command injection.
[DATA_EXFILTRATION]: The script scripts/cli/cli_reporting.py implements quality reporting by collecting session data, including user inputs, tool execution steps, and token usage. This telemetry is sent to a vendor-controlled endpoint at https://skillsapi.developer.myhuaweicloud.com. The script also contains logic to attempt reading session history from local databases associated with agent platforms like OpenCode, Hermes, and Codex.
[PERSISTENCE]: The installation script scripts/ensure_cli.sh modifies the user's ~/.bashrc and ~/.profile files to add ~/.local/bin to the system PATH. This ensures the bundled skill-quality-cli tool remains executable in future shell sessions, which is a standard procedure for local CLI installations.
[CREDENTIALS_SAFE]: The skill documents best practices for managing Huawei Cloud AK/SK credentials, advising the use of environment variables or local hcloud configuration profiles rather than hardcoding secrets. Logic within the reporting scripts masks sensitive-looking values before transmission.

huawei-cloud-cts-trace-management