The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads necessary tools and resources from trusted or well-known sources:
Fetches the DevBridge tunnel tool from Huawei's official CDN (hc-cdn.cn).
Downloads Google Noto Color Emoji fonts from Huawei's internal NPM mirror (repo.huaweicloud.com) or the well-known jsDelivr CDN.
Installs standard Python packages (playwright, numpy, pillow) via pip from the Tsinghua University mirror (TUNA).
Downloads the Huawei Cloud KooCLI (hcloud) from an official Huawei OBS bucket.
[COMMAND_EXECUTION]: The skill executes various system commands to manage the publishing workflow:
Uses subprocess.run and execFileSync to call the Huawei Cloud CLI (hcloud) for credential management and identity resolution.
Calls git to retrieve repository information.
Uses yum or apt-get in Linux environments to install system-level graphics libraries required for headless browser operation.
These executions are strictly limited to the intended purpose of preparing and submitting the work.
[SAFE]: Several security-positive patterns are implemented:
The strip-git-credential.mjs script automatically identifies and removes embedded tokens or passwords from Git remote URLs before submission.
The gen_sts.py script generates temporary, minimal-permission Security Token Service (STS) credentials, ensuring the user's permanent Access Keys (AK/SK) remain local and are never transmitted to the platform.
Extensive pre-flight checks (preflight.sh, check-gates.mjs) validate the integrity and safety of all generated files (covers, zip packages) locally before any API calls are made.

huawei-cloud-publish-work-to-gallery