The Agent Skills Directory

[COMMAND_EXECUTION]: The skill extensively uses the hcloud CLI and standard system utilities such as ssh, ssh-keygen, sed, and nohup to automate IAM configuration, manage SSH key pairs, and perform remote system operations.
[EXTERNAL_DOWNLOADS]: Fetches the hcloud (KooCLI) binary from a vendor-owned domain (hwcloudcli.obs.cn-north-1.myhuaweicloud.com) and installs official Huawei Cloud Python SDKs (huaweicloudsdkcore, huaweicloudsdkiotda).
[DYNAMIC_EXECUTION]: Dynamically constructs shell scripts and JSON configuration files, such as <temp_dir>/coc_create.json and a background cleanup script, to facilitate cloud operations and automated maintenance tasks.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: Accepts user-provided ecs_instance_id and ecs_ip parameters via the SKILL.md entry point.
Boundary markers: Does not utilize delimiters or specific instructions to isolate these inputs from the shell environment.
Capability inventory: Employs high-capability shell tools including hcloud and ssh across multiple workflow steps (File: SKILL.md).
Sanitization: Lacks documented validation or escaping for user-supplied instance IDs or IP addresses before they are interpolated into shell command strings, creating a potential injection surface.

huawei-cloud-ecs-passwordless-login