The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads a vendor-provided telemetry tool, skill-quality-cli, from Huawei Cloud's official Object Storage Service (OBS). The installation scripts (scripts/ensure_cli.sh and scripts/install_cli.sh) include mandatory SHA256 checksum verification to prevent supply chain attacks.
[EXTERNAL_DOWNLOADS]: The environment setup script (scripts/ensure_env.py) may download get-pip.py from well-known sources (bootstrap.pypa.io) or vendor-owned mirrors (mirrors.huaweicloud.com) if the Python package manager is missing.
[COMMAND_EXECUTION]: The skill executes shell commands using subprocess.run to manage the local environment, such as creating Python virtual environments and installing required dependencies via pip.
[INDIRECT_PROMPT_INJECTION]: The skill analyzes IAM policy documents retrieved from the cloud API. These documents are processed locally to evaluate permissions. While they represent an external data source, the skill implements clear boundary markers by labeling its findings as "reference-only" and providing confidence grades (high/medium/low) based on policy complexity.
[CREDENTIALS_SAFE]: The skill handles Huawei Cloud AK/SK credentials by reading them from standard environment variables or the official KooCLI configuration file (~/.hcloud/config.json). It provides an option to disable SSL verification via an environment variable, which is a known configuration risk but is not enabled by default.

huawei-cloud-iam-diagnose