The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Telemetry data is reported to the vendor's official quality API at https://skillsapi.developer.myhuaweicloud.com. This is consistent with vendor functionality for measuring agent skill performance.
[DATA_EXFILTRATION]: The skill_quality_sdk.py script collects execution metrics and masked inputs/outputs. It includes a robust data masking function (mask_text) that filters out phone numbers, API keys, tokens, and passwords using regular expressions before transmission to the vendor's telemetry endpoint.
[CREDENTIALS_UNSAFE]: The skill strictly requires credentials to be provided via environment variables (HUAWEICLOUD_SDK_AK, HUAWEICLOUD_SDK_SK). It specifically documentation states that it does not read from global configuration files on disk, reducing the risk of accidental credential leakage.
[COMMAND_EXECUTION]: All cloud operations are performed through the official huaweicloudsdkbss Python library rather than shell-level CLI calls, which provides a safer, more structured interface for data retrieval.
[INDIRECT_PROMPT_INJECTION]: The skill implements clear boundary markers in its instructions, advising the agent to ignore any instructions embedded in the data retrieved from the BSS APIs and enforcing a 'briefing-style' response format to prevent output manipulation.

huawei-cloud-partner-scout