huawei-cloud-waf-log-analysis SKILL.md skillC
huawei-cloud-waf-log-analysis from huaweicloud/huaweicloud-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add huaweicloud/huaweicloud-skills/huawei-cloud-waf-log-analysis@git:20260923.2534d4ePins git:20260923.2534d4e in mdr.lock. Pin the fingerprint instead.
- Audit grade
- C, 15 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- huaweicloud/huaweicloud-skills
- Path
skills/security/waf-aad/huawei-cloud-waf-log-analysis/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260923.2534d4e, committed Sep 23, 2026
- Size
- 39,734 bytes
- Repository stars
- 59
- License
- MIT
Analyze Huawei Cloud WAF security event logs to identify attack patterns, top sources, targeted assets, and provide actionable protection rule recommendations. Use when the user asks about recent attacks, WAF alert investigation, security posture review, attack trend analysis, or needs guidance on configuring protection rules based on observed threats. Triggers include "analyze WAF logs", "WAF attack analysis", "security event report", "what attacks happened", "WAF alert investigation…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Huawei Cloud WAF Security Event Log Analysis ## Overview This skill provides read-only analysis of Huawei Cloud WAF (Web Application Firewall) security event logs. It queries attack event data through hcloud CLI, performs multi-dimensional aggregation and analysis, and generates actionable protection rule recommendations based on observed attack patterns. **Key Capabilities:** - Query and filter security events by attack type, source IP, target domain/URL, time range, and geography - Aggregate statistics by attack category, source IP frequency, geographic distribution, and time trends - Recommend specific WAF protection rules (precise access control, CC protection, IP blacklist/whitelist, geo-blocking) based on analyzed attack characteristics **Applicable Scenarios:** - Daily security patrol and attack posture review - Incident response after receiving WAF alerts - Periodic security reports (weekly/monthly attack trends) - Anomaly investigation when suspicious activity is detected - Protection hardening decisions after attack events ## ⚠️ Read-Only Principle — STRICTLY ENFORCED …
Read the whole file at its exact version.
How to install
mdr add huaweicloud/huaweicloud-skills/huawei-cloud-waf-log-analysis@sha256:120a5a4942e7b9c7The line at the top of this page pins the label git:20260923.2534d4e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_flxfg2pwojac3agn)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Sep 23, 2026.
Audit of the latest version
- fail: No link to a raw IP address (matched: http://127.0.0.1:3128)
- fail: No script tag (matched: <script)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (39734 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
huaweicloud/huaweicloud-skills · 59 stars · license MIT · pushed 2026-11-07 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_flxfg2pwojac3agn GET https://markdownregistry.com/api/v1/resolve?ref=huaweicloud/huaweicloud-skills/huawei-cloud-waf-log-analysis GET https://markdownregistry.com/api/v1/blob/120a5a4942e7b9c73af2eb0b57a95a360d1e14b497e8ca14141110f1ea845898
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.