功能描述

华为云基础设施管理助手，基于 KooCLI (hcloud)。支持查询、审计和监控华为云资源：ECS（弹性云服务器）、VPC（虚拟私有云）、RDS（关系型数据库服务）。触发条件：用户询问华为云资源、ECS 服务器、VPC 网络、RDS 数据库、云资源清单、安全审计、资源状态检查等。写操作/破坏性操作需要用户...

使用说明 (SKILL.md)

华为云基础设施管理

Name: Huawei Cloud Infra
Author: 5xuanwen

概述

使用本地 KooCLI (hcloud) 管理华为云资源。默认只读查询，写操作需确认。

前置检查

每次触发时执行：

# 检查 KooCLI 是否已安装
hcloud version

如果未安装，先介绍 KooCLI 并询问用户：

华为云命令行工具服务（Koo Command Line Interface，KooCLI，原名HCloud CLI）是为发布在API Explorer上的云服务API提供的命令行管理工具。您可以通过此工具调用API Explorer中各云服务开放的API，管理和使用您的各类云服务资源。KooCLI只提供了一种通过CLI调用云服务API的方法。

安装方式：

自动安装：执行 python3 scripts/install_koocli.py
手动安装：参考 https://support.huaweicloud.com/qs-hcli/hcli_02_003.html

询问用户： "KooCLI 未安装。是否需要自动安装？(y/n)"

如果用户同意，执行安装脚本：python3 scripts/install_koocli.py
如果用户拒绝，提示手动安装方式并终止当前任务

安装完成后，初始化配置文件：

hcloud configure init

交互式输入 AK/SK/区域，生成配置文件 ~/.hcloud/config.json

初始化流程（安装/配置后执行）

仅在以下情况执行身份验证：

首次安装 KooCLI 后
配置/更新 AK/SK 后

hcloud IAM KeystoneListProjects

验证 AK/SK 是否正确，获取可用项目/区域列表。

查询流程（日常使用）

确定区域 → 用户指定或 HWCLOUD_REGION 或 ~/.hcloud/config.json
执行查询 → 只读命令直接执行
变更确认 → 写操作需列出命令，请求用户确认

安全规则

默认只读，变更需用户确认
破坏性操作（删除/终止/修改）必须确认
不泄露密钥（AK/SK）

任务指南

资源清单：List*/Show* 命令
健康检查：查询资源状态字段
安全检查：查询安全组规则
变更操作：显示命令并确认

区域处理

如果用户指定区域，遵循用户指定
否则使用 HWCLOUD_REGION 或 ~/.hcloud/config.json
结果有区域范围时，说明使用的区域

参考

常用命令见 references/hcloud-queries.md

安全使用建议

This skill appears to do what it says: it installs and drives the KooCLI (hcloud) to manage Huawei Cloud resources. Before installing, verify you trust the download URL (the script uses a Huawei OBS domain), and be aware the installer will extract a binary and attempt to place it in a system directory (may require sudo). The hcloud CLI will store your AK/SK in ~/.hcloud/config.json; prefer using a least-privilege API key (read-only) for queries, never paste keys into chat, and confirm any destructive operations when prompted. If you need stronger assurance, inspect the downloaded binary or install KooCLI manually using the official Huawei docs linked in SKILL.md.

功能分析

Type: OpenClaw Skill Name: hwc-infra Version: 1.0.0 The skill bundle is a legitimate management tool for Huawei Cloud infrastructure. It uses the official KooCLI (hcloud) and includes a helper script (scripts/install_koocli.py) to download and install the CLI from official Huawei Cloud OBS domains (myhuaweicloud.com). The instructions in SKILL.md correctly mandate user confirmation for both the installation process and any destructive cloud operations (e.g., deleting RDS or ECS instances), and no evidence of data exfiltration or malicious prompt injection was found.

能力评估

✓ Purpose & Capability

Name/description match the provided SKILL.md, reference file, and install script: the skill uses KooCLI (hcloud) to query/audit/manage ECS/VPC/RDS, and the included installer and examples are consistent with that purpose.

✓ Instruction Scope

SKILL.md limits actions to checking/using the hcloud CLI, reading ~/.hcloud/config.json or HWCLOUD_REGION, running read-only queries, and requiring explicit user confirmation for write/destructive operations. It does not instruct the agent to read unrelated files or exfiltrate data.

ℹ Install Mechanism

The installer (scripts/install_koocli.py) downloads a compressed hcloud binary from a Huawei OBS URL and extracts it to a system path (default /usr/local/bin on Unix). Download+extract and placing a binary in a system directory is expected for CLI installation, but it writes files to disk and may require elevated permissions — verify the download URL and be prepared to run with appropriate privileges.

✓ Credentials

The skill does not request unrelated environment variables or extra credentials. It relies on standard hcloud configuration (interactive AK/SK input and ~/.hcloud/config.json or HWCLOUD_REGION), which is proportional to cloud management functionality. Note: the skill does not declare a primaryEnv variable, but expecting the CLI to use AK/SK in config is reasonable.

✓ Persistence & Privilege

The skill is not forced-always, is user-invocable, and does not modify other skills or system-wide agent config. It can install a binary into system paths (normal for a CLI) but does not request permanent elevated privileges itself.

版本历史

v1.0.0

Initial release of hwc-infra 1.0.0: - Provides a Huawei Cloud infrastructure management assistant based on KooCLI (hcloud). - Supports querying, auditing, and monitoring ECS, VPC, and RDS resources. - Default operations are read-only; all write or destructive actions require explicit user confirmation. - Automatically checks for KooCLI installation and guides the user through setup if missing. - Ensures security by never exposing AK/SK keys and requiring user confirmation for any changes.

元数据

Slug hwc-infra

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题

Huawei Cloud Infra 是什么？

华为云基础设施管理助手，基于 KooCLI (hcloud)。支持查询、审计和监控华为云资源：ECS（弹性云服务器）、VPC（虚拟私有云）、RDS（关系型数据库服务）。触发条件：用户询问华为云资源、ECS 服务器、VPC 网络、RDS 数据库、云资源清单、安全审计、资源状态检查等。写操作/破坏性操作需要用户... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 128 次。

如何安装 Huawei Cloud Infra？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install hwc-infra」即可一键安装，无需额外配置。

Huawei Cloud Infra 是免费的吗？

是的，Huawei Cloud Infra 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Huawei Cloud Infra 支持哪些平台？

Huawei Cloud Infra 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Huawei Cloud Infra？

由 chen_xuanwen（@5xuanwen）开发并维护，当前版本 v1.0.0。

Huawei Cloud Infra