The Agent Skills Directory

[COMMAND_EXECUTION]: The Python scripts pre_migration_check.py and post_migration_check.py use the subprocess module to execute system commands such as ping and the hcloud CLI for infrastructure verification and metadata retrieval.
[PRIVILEGE_ESCALATION]: The migration repair process described in MIGRATION_REFERENCE.md requires high-level privileges to perform operations like mounting file systems, using chroot to enter the target disk environment, and utilizing chpasswd to set the root password for the migrated instance.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data from migration_hosts.json and tool outputs. While this creates a potential attack surface for indirect prompt injection, the skill includes explicit instructions for the agent to verify host lists and confirm actions with the user before proceeding.
[EXTERNAL_DOWNLOADS]: The instructions guide the installation of the SMS-Agent, a vendor-provided tool from Huawei Cloud. These downloads and executions are within the scope of the vendor's own infrastructure and are documented neutrally as intended functionality.
[CREDENTIALS_UNSAFE]: The documentation and interactive scripts utilize placeholders like <AK> and <SK> for Huawei Cloud Access Keys and Secret Keys. The skill correctly instructs users to provide these values at runtime rather than hardcoding them, following secret management best practices.

huawei-cloud-sms-migration-assistant