The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses a unified Python script (scripts/ssh_client.py) leveraging the paramiko library for remote command execution and SFTP file transfers. It also uses the Huawei Cloud KooCLI (hcloud) for local infrastructure management. These operations are core to the skill's migration and provisioning functions.
[EXTERNAL_DOWNLOADS]: The skill downloads the Kunpeng DevKit CLI and Huawei Cloud KooCLI from official vendor mirrors (mirrors.huaweicloud.com and myhuaweicloud.com). These are recognized as legitimate vendor resources tracing back to the skill author.
[INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it processes source code paths and projects provided by the user or discovered on a remote server. This is mitigated by explicit instructions requiring the AI to confirm paths with the user before scanning or uploading, and by providing clear boundary markers for environment variables.
[DYNAMIC_EXECUTION]: The scripts/ssh_client.py uses dynamic imports (__import__('threading')) to handle concurrent downloads efficiently. Additionally, the provisioning script generates a user_data cloud-init script for root configuration on new ECS instances. These are benign implementations of standard cloud and Python patterns.
[CREDENTIALS_SAFE]: The skill implements strong secret management. SSH passwords are read from environment variables (MIGRATE_SSH_PASS) or a secure temporary file (/tmp/kunpeng_server_env.sh with chmod 600), and the Python client explicitly wipes the password from memory (os.environ.pop) immediately after a connection is established.

huawei-cloud-kunpeng-source-code-migrate