← Back to Skills Marketplace
huaweiclouddev

huawei-cloud-iam-query

by huaweicloud-skills-team · GitHub ↗ · v0.0.1 · MIT-0
cross-platform ⚠ suspicious
34
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install huawei-cloud-iam-query
Description
Queries Huawei Cloud identity and access management resources (IAM) via read-only Python SDK. Covers users, groups, policies, agencies, AK/SK, MFA devices, l...
README (SKILL.md)

Huawei Cloud Resource Query

⚠️ Execution Method (Must Read): This skill executes queries via local Python scripts. Using hcloud, openstack, or other CLI tools or direct API calls is prohibited.

  • Query scripts are located under the skill directory scripts/\x3Cservice_category>/ (e.g., scripts/as/list_scaling_groups.py)
  • All scripts and environment check scripts are inside the skill package. You must use skill action=exec to execute them; do not run them directly in a shell
  • For specific script paths and parameters, see references/\x3Cservice>/guide.md
  • Do not attempt hcloud, openstack, curl IAM, or other CLI/API methods. This skill does not depend on these tools
  • All paths are relative to the skill directory, which is the directory where this SKILL.md resides

Overview

This skill is a standalone read-only query skill that uses local Python scripts to call the Huawei Cloud Python SDK to query Huawei Cloud resources, available specifications, and existing resource information.

This skill is applicable to the following scenarios:

  1. Query available cloud resource specifications in a given region
  2. Query available images for a certain operating system
  3. Query cloud disk types and existing cloud disk information
  4. Query existing resources and their key attributes
  5. Query resources not created through Terraform or other IaC tools
  6. Prepare real parameters for automation configuration, resource verification, or environment inventory
  7. Obtain reusable information such as resource IDs, names, specifications, images, networks, and disks

This skill does NOT handle the following:

  1. Creating resources
  2. Modifying resources
  3. Deleting resources
  4. Guessing or fabricating information that has not been queried

Capability Scope

This skill provides query capabilities through categorized scripts under the scripts directory, and usage instructions through categorized guides under the references directory. Capabilities provided by this skill include:

  1. Query resource lists
  2. Query individual resource details
  3. Query available specifications, images, disk types, and other selection information
  4. Query key identifiers and dependency relationships of existing resources

Usage Principles

Important: Script paths executed within this skill are all relative to the skill directory, which is the directory where this SKILL.md resides

  1. This skill only performs queries; it does not perform any write operations
  2. Prioritize using explicitly specified region, project, AZ, resource name, resource ID, etc. provided by the user
  3. Query results must be based on actual API responses; do not infer based on experience
  4. Returned results should prioritize retaining key fields for subsequent reuse
  5. When the result set is large, narrow the scope first using conditions such as region, name, id, status, tag, etc.
  6. If there is no corresponding script or guide for the current resource type, clearly state that it is not supported; do not return unreliable results
  7. If the user has not provided necessary scope information and there are no default values in the environment, confirm the missing information before executing the query
  8. Execute directly according to guide.md; do not view script contents in the scripts directory
  9. Cache output when it is large
  10. You must execute -h before each script execution to view usage
  11. Do not guess script names; execute according to the script names in guide.md. If a script name is not in guide.md, it means it is not supported

Prerequisites

Before using, you must run the environment check script to complete environment validation and dependency installation in one step:

  • Linux / macOS: skill action=exec: bash skill://scripts/check_env.sh
  • Windows: skill action=exec: powershell -ExecutionPolicy Bypass -File skill://scripts/check_env.ps1

Windows Note: Do not use && to chain commands (PowerShell 5.x does not support it). Use semicolons if you need to change directories first.

The script will check in sequence: Python >= 3.6 → install dependencies → validate SDK → validate credentials → validate service availability. If the environment check fails, fix the issues before continuing with other scripts.

Environment Variables:

Variable Required Description
HW_ACCESS_KEY Yes Huawei Cloud AK
HW_SECRET_KEY Yes Huawei Cloud SK
HW_REGION_NAME No Default cn-north-4
HW_PROJECT_ID No Project ID (automatically obtained via IAM API when not set)
HW_SECURITY_TOKEN No Required when using temporary AK/SK

Do not output the values of the above environment variables. For additional parameters required by other resource scripts (availability zone, enterprise project, etc.), see the corresponding guide.md.


Execution Flow

When this skill is invoked, you must follow these steps. Do not wait for the user to prompt again:

Step 1: Environment Preparation

Run the environment check script to ensure dependencies are installed and credentials are configured:

  • Linux / macOS: skill action=exec: bash skill://scripts/check_env.sh
  • Windows: skill action=exec: powershell -ExecutionPolicy Bypass -File skill://scripts/check_env.ps1

If the environment check fails, fix the issues as prompted and re-run until it passes.

Step 2: Identify and Execute Query Scripts

  1. Based on the user's query intent, read references/\x3Cservice>/guide.md to determine the script path and parameters to execute
  2. First execute -h to view script usage:
    • Linux / macOS: skill action=exec: skill://.venv/bin/python3 skill://scripts/\x3Cservice>/\x3Cscript>.py -h
    • Windows: skill action=exec: skill://.venv/Scripts/python3.exe skill://scripts/\x3Cservice>/\x3Cscript>.py -h
  3. Assemble parameters based on user requirements and execute the script:
    • Linux / macOS: skill action=exec: skill://.venv/bin/python3 skill://scripts/\x3Cservice>/\x3Cscript>.py \x3Cparameters>
    • Windows: skill action=exec: skill://.venv/Scripts/python3.exe skill://scripts/\x3Cservice>/\x3Cscript>.py \x3Cparameters>
  4. Format the results and return them to the user

Important:

  • All scripts and environment check scripts are inside the skill package. You must use skill action=exec to execute them; do not run them directly in a shell
  • The venv is automatically created by the check_env script. On Linux/macOS, Python is located at .venv/bin/python3; on Windows, at .venv/Scripts/python3.exe
  • Do not use python3 directly to execute scripts
  • Do not read script source code in the scripts directory; just follow the instructions in guide.md
  • Cache results when output is large
  • The --project_id parameter is optional; when not provided, it is automatically obtained via the IAM API based on region

Directory Structure

Directory conventions are as follows (all paths are relative to the skill directory):

  1. scripts/\x3Cresource_category>/ contains Python query scripts for the corresponding resources. You do not need to read script contents; just execute scripts according to the usage instructions in guide.md
  2. references/\x3Cresource_category>/guide.md contains usage guides for the corresponding resources
  3. Each script is responsible for only one clear, single query action
  4. Each resource category maintains at least one guide.md to describe script capabilities, parameters, and usage

Parameter Confirmation

Before executing a query script, confirm the following parameters:

Parameter Required Description
region Yes Huawei Cloud region, e.g., cn-north-4
--project_id No Project ID; automatically obtained when not provided
--availability_zone No Availability zone; required for some resource queries

For script-specific parameters, see references/\x3Cservice>/guide.md.


Output Format

Query results are output in JSON format, containing the following common fields:

  • total: Total number of matched resources
  • items: Resource list, where each resource contains key fields such as id, name, status, etc.
  • Specific fields vary by resource type; see individual guide.md files for details

Verification Method

  1. Run the environment check script to confirm dependencies and credentials are available
  2. Use the -h parameter to view script usage and confirm correct parameters
  3. Execute queries on known resources and compare with console data to verify result accuracy
  4. Check whether the returned total count is reasonable

Best Practices

  1. Narrow the query scope first (specify region, availability zone, etc.) to avoid returning too much data
  2. Use --help to view the complete list of supported parameters for a script
  3. Cache large query results locally to avoid repeated requests
  4. When querying multiple resources, follow dependency order (e.g., query VPC first, then subnets)
  5. When script execution fails, check environment variables and network connectivity first

Reference Documentation

  • Query script usage guides for each service: references/\x3Cservice>/guide.md

Notes

  1. This skill only provides read-only query capabilities; it does not perform any write operations
  2. Do not output the values of environment variables such as HW_ACCESS_KEY, HW_SECRET_KEY, etc.
  3. All scripts must be executed via skill action=exec; do not run them directly in a shell
  4. Do not guess script names; strictly execute according to the names in guide.md
  5. You must run the environment check script before querying
  6. When using temporary AK/SK, you must set HW_SECURITY_TOKEN
Usage Guidance
Install only if you are comfortable giving the skill Huawei Cloud IAM read access and allowing its setup script to create a virtual environment and install packages. Prefer temporary, least-privilege credentials, avoid using it on sensitive hosts until TLS verification and dependency pinning are fixed, and treat any printed IAM user, policy, MFA, and access-key metadata as sensitive.
Capability Assessment
Purpose & Capability
The manifest and shipped scripts are centered on read-only IAM queries, but SKILL.md also contains generic cloud inventory wording for images, disks, specifications, networks, and non-IAM resources that do not match the published IAM-only purpose.
Instruction Scope
Runtime instructions require the agent to run the environment check before queries and use generic references/<service> and scripts/<service> placeholders; the actual package only has IAM guides/scripts, but the instruction scope is broader than the stated purpose.
Install Mechanism
The required setup creates a local .venv, re-executes under it, installs Python dependencies, probes package mirrors, and can download and execute get-pip.py if pip is missing; this is more host mutation than a simple read-only cloud query skill implies.
Credentials
The skill needs Huawei Cloud AK/SK credentials and performs IAM API calls, which fits the purpose, but config.py disables SDK TLS certificate verification and ensure_env.py also disables default HTTPS verification, creating avoidable credential and supply-chain exposure.
Persistence & Privilege
No destructive IAM operations, background persistence, or credential exfiltration were found. The main persistent local change is the .venv and installed packages; privileged OS package-manager code is present in ensure_env.py but is not called by the main execution flow.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install huawei-cloud-iam-query
  3. After installation, invoke the skill by name or use /huawei-cloud-iam-query
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.0.1
Initial release: Enables read-only querying of Huawei Cloud IAM resources via Python SDK. - Supports querying users, groups, policies, agencies, AK/SK, MFA devices, security policies, compliance, and quotas. - Enforces execution of local Python scripts through skill actions only; no direct CLI, API, or external tool usage allowed. - Requires running a packaged environment check script before any queries. - Query scripts are organized by category and must be executed as specified in relevant guide.md files. - Does not support resource creation, modification, or deletion—read-only queries only.
Metadata
Slug huawei-cloud-iam-query
Version 0.0.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is huawei-cloud-iam-query?

Queries Huawei Cloud identity and access management resources (IAM) via read-only Python SDK. Covers users, groups, policies, agencies, AK/SK, MFA devices, l... It is an AI Agent Skill for Claude Code / OpenClaw, with 34 downloads so far.

How do I install huawei-cloud-iam-query?

Run "/install huawei-cloud-iam-query" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is huawei-cloud-iam-query free?

Yes, huawei-cloud-iam-query is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does huawei-cloud-iam-query support?

huawei-cloud-iam-query is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created huawei-cloud-iam-query?

It is built and maintained by huaweicloud-skills-team (@huaweiclouddev); the current version is v0.0.1.

💬 Comments