The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes subprocess.run to invoke the obsutil command-line tool for transferring data to Huawei Cloud Object Storage Service (OBS). This is a standard and documented functionality of the migration tool and is implemented securely by passing arguments as a list, which prevents shell injection vulnerabilities.
[SAFE]: The skill implements a robust "assume-malicious" posture on the source side. The teradata_reader.py module includes a mandatory SQL validation step that checks every query against a whitelist of read-only commands (e.g., SELECT, SHOW, HELP) and a blacklist of forbidden write operations (e.g., INSERT, UPDATE, DROP), ensuring the source database remains untouched.
[SAFE]: To protect the target Huawei Cloud DWS environment, dws_writer.py employs strict regular expression validation and quoting for all SQL identifiers (schemas, tables, columns), which prevents SQL injection during schema and data migration.
[SAFE]: The skill follows security best practices by encouraging the use of environment variables for sensitive database credentials, as seen in the configuration templates and documentation, rather than hardcoding secrets in scripts or configuration files.

huawei-cloud-dws-migration-teradata-to-dws