huawei-cloud-skill-audit SKILL.md skillA
huawei-cloud-skill-audit from huaweicloud/huaweicloud-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add huaweicloud/huaweicloud-skills/huawei-cloud-skill-audit@git:20260928.123887fPins git:20260928.123887f in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- huaweicloud/huaweicloud-skills
- Path
skills/devtools/common/huawei-cloud-skill-audit/SKILL.md- Versions recorded
- 9
- Latest version
- git:20260928.123887f, committed Sep 28, 2026
- First version recorded
- Jul 29, 2026
- Size
- 22,183 bytes
- Repository stars
- 59
- License
- MIT
Audit Huawei Cloud skills for quality, security, and compliance using a three-check pipeline: skillspector (AI security), gitleaks (credential leak), and runtime_security (CWE 高危运行模式). Generates structured reports with issue details and fix strategies. Triggers include: "审计技能","技能审计","检查技能质量","扫描技能问题","技能安全审计", "audit skill","check skill quality","scan skills for issues","skill audit", "华为云技能审计","技能合规检查","skill gate","质量门禁","技能检查", "audit huawei cloud skill…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Huawei Cloud Skill Audit > Three-check security pipeline for auditing Huawei Cloud skills — security gate. --- <!-- cli-install-version: 3.8.0 --> ## Step 0: Install skill-quality-cli (idempotent, skip if already installed) > 先设置 `AUDIT_DIR` 为本 skill 安装目录的绝对路径(`export AUDIT_DIR=/path/to/huawei-cloud-skill-audit`, > 示例: `$HOME/.local/share/huawei-cloud-skill-audit`), 后续所有命令统一用它, > 禁止在被审计目录内使用相对路径执行本 skill 的脚本(防目录内恶意同名脚本劫持, 见 Core Commands 安全要求)。 ```bash export AUDIT_DIR=/path/to/huawei-cloud-skill-audit # 替换为实际安装目录 bash "$AUDIT_DIR/scripts/ensure_cli.sh" ``` > **⚠️ 强制要求**: 本 skill 的任何 `hcloud` 命令必须用 `skill-quality-cli run --skill-name huawei-cloud-skill-audit -- ` 包裹, 禁止裸调 hcloud。(Mandatory: bare `hcloud` calls are strictly forbidden.) > > 安装行为说明: > - 已装且可用 → 静默跳过; 未装 → 从华为云 OBS(HTTPS) 下载官方包(wrapper + ELF + Python fallback, low-GLIBC 兼容)安装到 `~/.local/bin/`。 > - 离线/安装失败 → stderr 打印 `警告:` 后跳过, 不阻塞业务流(但 wrapped 命令将 `command not found`, 正式场景必须保证安装成功)。 > - 调试/离线场景可用裸命令 `python3 "$AUDIT_DIR/scripts/skill_audit.py" ...`(见 Core Commands 安全要求与统一说明)。 ## Overview …
Read the whole file at its exact version.
How to install
mdr add huaweicloud/huaweicloud-skills/huawei-cloud-skill-audit@sha256:3e168c2b1225597fThe line at the top of this page pins the label git:20260928.123887f, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_h4jxhnukojrua5cd)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 9 versions of this file, between Jul 29, 2026 and Sep 28, 2026, about one every 8 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260928.123887f latest | 2026-09-28 | 123887f | 22,183 B | A | view · diff |
| git:20260921.42636d7 | 2026-09-21 | 42636d7 | 19,025 B | A | view · diff |
| git:20260919.bde3f5b | 2026-09-19 | bde3f5b | 18,835 B | A | view · diff |
| git:20260916.70dc5f5 | 2026-09-16 | 70dc5f5 | 22,829 B | A | view · diff |
| git:20260916.9aa0b76 | 2026-09-16 | 9aa0b76 | 22,030 B | A | view · diff |
| git:20260910.2f04cbf | 2026-09-10 | 2f04cbf | 16,808 B | A | view · diff |
| git:20260907.7775fc3 | 2026-09-07 | 7775fc3 | 16,767 B | A | view · diff |
| git:20260820.03eb705 | 2026-08-20 | 03eb705 | 14,372 B | A | view · diff |
| git:20260729.5e9e03b | 2026-07-29 | 5e9e03b | 16,665 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (22183 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
huaweicloud/huaweicloud-skills · 59 stars · license MIT · pushed 2026-11-07 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_h4jxhnukojrua5cd GET https://markdownregistry.com/api/v1/resolve?ref=huaweicloud/huaweicloud-skills/huawei-cloud-skill-audit GET https://markdownregistry.com/api/v1/blob/3e168c2b1225597f2fb8dc9f9e6fe100a2f4263809410993a40ba1bde1a07401
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.