The Agent Skills Directory

[COMMAND_EXECUTION]: The skill facilitates the execution of custom scripts on remote Huawei Cloud Flexus L server instances using the Cloud Operations Center (COC) service. This is the primary intended function for cloud operations automation.
[EXTERNAL_DOWNLOADS]: The skill instructions direct the installation of official Huawei Cloud SDKs (huaweicloudsdkcore and huaweicloudsdkcoc) from the standard Python Package Index (PyPI) and established mirrors. These are recognized vendor resources.
[REMOTE_CODE_EXECUTION]: The skill provides capabilities to deploy and run code (Shell, Python, and Batch) on remote targets via the Huawei Cloud UniAgent proxy. This execution is authorized by the user's own credentials and is scoped to their managed cloud instances.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill handles sensitive authentication credentials (AK/SK) using environment variables and the getpass utility for interactive inputs, which aligns with security best practices for minimizing credential exposure in logs or terminal history.
[INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface where instructions embedded in user-supplied scripts could be processed.
Ingestion points: The caller.py script accepts arbitrary script content via the --content parameter.
Boundary markers: The SKILL.md includes explicit 'Security Execution Rules' directing the agent to never print script contents or commands containing credentials.
Capability inventory: The skill possesses network access (via Huawei Cloud SDK) and remote file-write/execution capabilities on target instances.
Sanitization: The skill validates script types (SHELL, PYTHON, BAT) and risk levels, though it does not sanitize the contents of user-provided scripts as it is a development tool.

huawei-cloud-flexus-l-server-scripts-excute