huawei-cloud-skill-creator

Huawei Cloud Skill Creator v2 Six-Phase Strict Pipeline — Each phase depends on the previous phase's output and cannot be skipped. If any phase is missing, restart from the missing phase. --- Overview The Huawei Cloud Skill Creator v2 is based on a six-phase strict pipeline: starting with Socratic Q&A requirements analysis, followed by technical research (CLI→SDK→API three-level fallback), document generation, test preparation, detailed testing, resource cleanup and compliance check, ultimately generating a complete skill package that conforms to the Huawei Cloud Skill Specification. It only…

\\n'*)\n echo \"[WARN] Command rejected (shell metacharacters): ${cmd:0:60}\"; return 1 ;;\n esac\n # 2) argv 级白名单校验\n if ! parse_cmd_argv \"$cmd\"; then\n echo \"[WARN] Command rejected (unparseable): ${cmd:0:60}\"; return 1\n fi\n if ! is_cmd_argv_safe; then\n echo \"[WARN] Command rejected (not in allowlist): ${cmd:0:60}\"; return 1\n fi\n return 0\n}\n\n# parse_cmd_argv: 用 shlex 将命令字符串解析为参数数组，结果写入全局 _PARSE_ARGV。\n# 返回 0 表示解析成功且至少有一个参数；1 表示解析失败（含空命令/引号不闭合）。\nparse_cmd_argv() {\n local cmd=\"$1\"\n _PARSE_ARGV=()\n while IFS= read -r _a; do _PARSE_ARGV+=(\"$_a\"); done \u003c \u003c(python3 -c '\nimport shlex, sys\ntry:\n print(\"\\n\".join(shlex.split(sys.argv[1])))\nexcept Exception:\n sys.exit(1)\n' \"$cmd\" 2>/dev/null)\n [ ${#_PARSE_ARGV[@]} -gt 0 ]\n}\n\n# is_cmd_argv_safe: 对已解析的 _PARSE_ARGV 执行白名单策略（单一事实来源）。\n# - 只放行具体命令 hcloud / curl；\n# - 例外：bash -n \u003cSKILL_PATH 内脚本绝对路径>（自带脚本冒烟语法检查）；\n# - 其余一律拒绝，尤其是解释器（python/python3/bash/sh/perl 等）——\n# 封堵 python3 -c \"...\"、python3 /tmp/evil.py、bash /tmp/evil.sh 等任意代码/脚本执行面。\nis_cmd_argv_safe() {\n local _first=\"${_PARSE_ARGV[0]:-}\" _i\n case \"$_first\" in\n hcloud|curl)\n ;;\n bash)\n # 仅允许 bash -n \u003c仓库内绝对脚本路径> 的语法检查\n if [ \"${#_PARSE_ARGV[@]}\" -ne 3 ] || [ \"${_PARSE_ARGV[1]}\" != \"-n\" ]; then\n return 1\n fi\n case \"${_PARSE_ARGV[2]}\" in\n \"$SKILL_PATH\"/*) ;;\n *) return 1 ;;\n esac\n ;;\n *)\n # 解释器及一切未列明命令均拒绝\n for _i in python python3 bash sh perl ruby node php awk; do\n [ \"$_first\" = \"$_i\" ] && return 1\n done\n return 1\n ;;\n esac\n return 0\n}\n\n# run_cmd_argv: 参数列表直传执行(不经过 shell), 杜绝管道/重定向/命令拼接注入。\n# 执行前复用与 validate_command 相同的 argv 级安全校验（双保险），\n# 覆盖调用方未先经 validate_command 的路径（如 sdk 兜底、api 分支），\n# 校验失败返回 127（调用方统一按 SKIP:command_rejected 处理）。\nrun_cmd_argv() {\n local cmd=\"$1\"\n local out=\"\"\n local rc=0\n if ! parse_cmd_argv \"$cmd\" || ! is_cmd_argv_safe; then\n return 127\n fi\n out=$(\"${_PARSE_ARGV[@]}\" 2>&1)\n rc=$?\n printf '%s' \"$out\"\n return \"$rc\"\n}\n\n# ------------------------------------------------------------------\n# Helpers\n# ------------------------------------------------------------------\nSKILL_NAME=$(grep '^name:' \"$SKILL_MD\" 2>/dev/null | head -1 | sed 's/^name:[[:space:]]*//;s/^\"//;s/\"$//' || echo \"unknown\")\nQUALITY_SKILL_NAME=\"$SKILL_NAME\"\n\nPASS_COUNT=0\nFAIL_COUNT=0\nSKIP_COUNT=0\nRESULTS_ARR=()\n\nrecord() {\n local op=\"$1\" type=\"$2\" status=\"$3\" note=\"$4\"\n RESULTS_ARR+=(\"$(printf '| `%s` | %s | %s | %s |' \"$op\" \"$type\" \"$status\" \"$note\")\")\n case \"$status\" in\n ✅*|✅) PASS_COUNT=$((PASS_COUNT + 1)) ;;\n ❌*|❌) FAIL_COUNT=$((FAIL_COUNT + 1)) ;;\n ⏭️*) SKIP_COUNT=$((SKIP_COUNT + 1)) ;;\n esac\n}\n\n# ------------------------------------------------------------------\n# Step 0: Check hcloud CLI availability\n# ------------------------------------------------------------------\nHCLOUD_AVAILABLE=false\nHCLOUD_AUTHENTICATED=false\nHCLOUD_VERSION=\"\"\n\nif command -v hcloud &>/dev/null; then\n HCLOUD_AVAILABLE=true\n HCLOUD_VERSION=$(hcloud --version 2>/dev/null | head -1 || echo \"unknown\")\n if hcloud configure list &>/dev/null 2>&1; then\n HCLOUD_AUTHENTICATED=true\n fi\nfi\n\nSDK_AVAILABLE=false\nif python3 -c \"import huaweicloudsdkcore\" &>/dev/null 2>&1; then\n SDK_AVAILABLE=true\nfi\n\nCURL_AVAILABLE=false\ncommand -v curl &>/dev/null && CURL_AVAILABLE=true\n\n# ------------------------------------------------------------------\n# Resolve executor\n# ------------------------------------------------------------------\nresolve_executor() {\n local prefer=\"$1\"\n case \"$prefer\" in\n cli)\n if [ \"$HCLOUD_AVAILABLE\" = true ]; then echo \"cli\"; else echo \"\"; fi\n ;;\n sdk)\n if [ \"$SDK_AVAILABLE\" = true ]; then echo \"sdk\"; else echo \"\"; fi\n ;;\n api)\n local _ak=\"\" _sk=\"\" _name _value; while IFS='=' read -r _name _value; do case \"${_name^^}\" in HUAWEI*_ACCESS_KEY|HUAWEI*_AK|HW*_ACCESS_KEY|HW*_AK|HWC*_ACCESS_KEY|HWC*_AK) _ak=\"$_value\" ;; HUAWEI*_SECRET_KEY|HUAWEI*_SK|HW*_SECRET_KEY|HW*_SK|HWC*_SECRET_KEY|HWC*_SK) _sk=\"$_value\" ;; esac; done \u003c \u003c(env); if [ \"$CURL_AVAILABLE\" = true ] && [ -n \"$_ak\" ] && [ -n \"$_sk\" ]; then echo \"api\"; else echo \"\"; fi\n ;;\n auto)\n if [ \"$HCLOUD_AVAILABLE\" = true ]; then echo \"cli\"\n elif [ \"$SDK_AVAILABLE\" = true ]; then echo \"sdk\"\n elif [ \"$CURL_AVAILABLE\" = true ]; then echo \"api\"\n else echo \"\"; fi\n ;;\n *) echo \"\" ;;\n esac\n}\n\n# ------------------------------------------------------------------\n# Syntax error detection\n# ------------------------------------------------------------------\nis_syntax_error() {\n local output=\"$1\"\n printf '%s\\n' \"$output\" | grep -qiE \"Operation .* is not supported\" && return 0\n printf '%s\\n' \"$output\" | grep -qiE \"parameter.*not.*recognized|unrecognized.*arg\" && return 0\n printf '%s\\n' \"$output\" | grep -qiE \"format must be|Invalid.*parameter\" && return 0\n printf '%s\\n' \"$output\" | grep -qiE \"AttributeError|TypeError|module.*has no attribute\" && return 0\n return 1\n}\n\n# ------------------------------------------------------------------\n# Test execution functions\n# ------------------------------------------------------------------\nrun_cli_test() {\n local cmd=\"$1\"\n local output\n local ec=0\n validate_command \"$cmd\" || { echo \"SKIP:command_rejected\"; return 1; }\n if output=$(run_cmd_argv \"$cmd\"); then\n ec=0\n else\n ec=$?\n if [ \"$ec\" -eq 127 ]; then\n echo \"SKIP:command_rejected\"\n return 1\n fi\n fi\n\n if [ \"$ec\" -eq 0 ] && ! printf '%s\\n' \"$output\" | grep -qiE \"error|failed|denied|unauthorized|not found\"; then\n echo \"PASS:$output\"\n return 0\n fi\n if is_syntax_error \"$output\"; then\n echo \"SYNTAX_ERR:$output\"\n return 2\n fi\n echo \"FAIL:$output\"\n return 1\n}\n\nrun_sdk_test() {\n local svc=\"$1\" op=\"$2\" region=\"$3\"\n local output\n if output=$(python3 -c \"\nimport sys, os, json\nsvc_lower, op, region, insecure = sys.argv[1], sys.argv[2], sys.argv[3], sys.argv[4] == 'true'\ntry:\n import re\n from huaweicloudsdkcore.auth.credentials import BasicCredentials\n from huaweicloudsdkcore.http.http_config import HttpConfig\n svc_module = __import__('huaweicloudsdk' + svc_lower + '.v1', fromlist=[svc + 'Client'])\n Client = getattr(svc_module, svc + 'Client')\n ak = (os.environ.get('HUAWEICLOUD_SDK_AK') or os.environ.get('HUAWEI_ACCESS_KEY')\n or os.environ.get('HW_ACCESS_KEY') or os.environ.get('HUAWEI_AK') or os.environ.get('HW_AK') or '')\n sk = (os.environ.get('HUAWEICLOUD_SDK_SK') or os.environ.get('HUAWEI_SECRET_KEY')\n or os.environ.get('HW_SECRET_KEY') or os.environ.get('HUAWEI_SK') or os.environ.get('HW_SK') or '')\n cred = BasicCredentials(ak, sk)\n config = HttpConfig.get_default_config()\n if insecure:\n config.ignore_ssl_verification = True\n client = Client.new_builder().with_http_config(config).with_credentials(cred).with_region(region).build()\n req_class = getattr(svc_module, op + 'Request')\n req = req_class(limit=1)\n fn_name = re.sub(r'(?\u003c!^)(?=[A-Z])', '_', op).lower() # ListFlavors -> list_flavors\n resp = getattr(client, fn_name)(req)\n print(json.dumps(resp.to_json_object() if hasattr(resp,'to_json_object') else str(resp), indent=2)[:500])\nexcept Exception as e:\n print(f'SDK_ERROR: {e}', file=sys.stderr)\n sys.exit(1)\n\" \"$svc\" \"$op\" \"$region\" \"$INSECURE\" 2>&1); then\n local ec=0\n else\n local ec=$?\n fi\n if [ \"$ec\" -eq 0 ] && [ -n \"$output\" ]; then\n echo \"PASS:$output\"\n return 0\n fi\n if echo \"$output\" | grep -qiE \"AttributeError|TypeError|module.*has no attribute\"; then\n echo \"SYNTAX_ERR:$output\"\n return 2\n fi\n echo \"FAIL:$output\"\n return 1\n}\n\n# ------------------------------------------------------------------\n# Main test loop\n# ------------------------------------------------------------------\necho \"==========================================\"\necho \" CLI Functional Test\"\necho \" Skill: $SKILL_NAME\"\necho \" Path: $SKILL_PATH\"\necho \" Region: $REGION\"\necho \" Executor mode: $EXECUTOR\"\necho \"==========================================\"\necho \"\"\n\nif [ ! -f \"$TEST_VARS\" ]; then\n echo \"[FATAL] templates/test-vars.json not found at $TEST_VARS — no tests executed\"\n record \"(no test vars)\" \"N/A\" \"❌ 失败\" \"templates/test-vars.json 不存在\"\n QUALITY_STATUS=\"sys_fail\"\n exit 1\nelse\n # Parse test cases from JSON\n TC_COUNT=$(python3 -c \"import sys,json; d=json.load(open(sys.argv[1])); print(len(d.get('test_cases',[])))\" \"$TEST_VARS\" 2>/dev/null || echo \"0\")\n\n if [ \"$TC_COUNT\" -eq 0 ]; then\n echo \"[WARN] No test cases in templates/test-vars.json\"\n record \"(empty test list)\" \"N/A\" \"⏭️ 跳过\" \"test_cases 数组为空\"\n else\n echo \"Found $TC_COUNT test case(s) in templates/test-vars.json\"\n echo \"\"\n\n for i in $(seq 0 $((TC_COUNT - 1))); do\n TC_ID=$(python3 -c \"import sys,json; d=json.load(open(sys.argv[1])); i=int(sys.argv[2]); print(d['test_cases'][i].get('id','TC-%02d'%(i+1)))\" \"$TEST_VARS\" \"$i\" 2>/dev/null) || true\n TC_NAME=$(python3 -c \"import sys,json; d=json.load(open(sys.argv[1])); i=int(sys.argv[2]); print(d['test_cases'][i].get('name',''))\" \"$TEST_VARS\" \"$i\" 2>/dev/null) || true\n TC_CMD=$(python3 -c \"import sys,json; d=json.load(open(sys.argv[1])); i=int(sys.argv[2]); print(d['test_cases'][i].get('command',''))\" \"$TEST_VARS\" \"$i\" 2>/dev/null) || true\n TC_TYPE=$(python3 -c \"import sys,json; d=json.load(open(sys.argv[1])); i=int(sys.argv[2]); print(d['test_cases'][i].get('type','syntax'))\" \"$TEST_VARS\" \"$i\" 2>/dev/null) || true\n TC_EXEC=$(python3 -c \"import sys,json; d=json.load(open(sys.argv[1])); i=int(sys.argv[2]); print(d['test_cases'][i].get('executor','auto'))\" \"$TEST_VARS\" \"$i\" 2>/dev/null) || true\n\n echo \"--- [$TC_ID] $TC_NAME ---\"\n echo \" Command: $TC_CMD\"\n\n # Resolve executor for this test case\n ACTIVE_EXEC=$(resolve_executor \"$TC_EXEC\")\n if [ -z \"$ACTIVE_EXEC\" ]; then\n ACTIVE_EXEC=$(resolve_executor \"auto\")\n fi\n if [ -z \"$ACTIVE_EXEC\" ]; then\n record \"$TC_CMD\" \"$TC_TYPE\" \"⏭️ 跳过\" \"无可用执行后端\"\n echo \" ⏭️ SKIP: No execution backend available\"\n echo \"\"\n continue\n fi\n\n # Substitute {region} placeholder\n CMD_FINAL=\"${TC_CMD//\\{region\\}/$REGION}\"\n\n # Reject commands with unresolved template placeholders ({Service}, {endpoint}, etc.)\n if printf '%s' \"$CMD_FINAL\" | grep -qE '\\{[A-Za-z_]+\\}'; then\n record \"$CMD_FINAL\" \"$TC_TYPE\" \"⛔ 需人工验证\" \"命令含未替换的模板占位符，未执行\"\n echo \" ⛔ MANUAL VERIFICATION NEEDED: unresolved placeholder in command\"\n echo \"\"\n continue\n fi\n\n case \"$ACTIVE_EXEC\" in\n cli)\n if echo \"$CMD_FINAL\" | grep -qE '^hcloud'; then\n WRAP_CMD=\"$CMD_FINAL\"\n if result=$(run_cli_test \"$WRAP_CMD\" 2>&1); then\n status_code=0\n else\n status_code=$?\n fi\n case \"$status_code\" in\n 0)\n record \"$CMD_FINAL\" \"CLI $TC_TYPE\" \"✅ 通过\" \"CLI verified\"\n echo \" ✅ PASS (CLI)\"\n ;;\n 2)\n record \"$CMD_FINAL\" \"CLI $TC_TYPE\" \"❌ 失败\" \"语法错误，需修复\"\n echo \" ❌ FAIL - syntax error (CLI)\"\n FAIL_COUNT=$((FAIL_COUNT - 1)) # record already counted\n ;;\n *)\n # Try SDK fallback\n echo \" ⚠ CLI failed → trying SDK fallback\"\n if [ \"$SDK_AVAILABLE\" = true ]; then\n # Extract svc/op from command\n svc_op=$(echo \"$CMD_FINAL\" | grep -oP 'hcloud \\K[A-Z][A-Za-z0-9]* [A-Z][A-Za-z0-9]*' | head -1) || true\n if [ -n \"$svc_op\" ]; then\n read -r svc op \u003c\u003c\u003c \"$svc_op\"\n if sdk_result=$(run_sdk_test \"$svc\" \"$op\" \"$REGION\" 2>&1); then\n sdk_ec=0\n else\n sdk_ec=$?\n fi\n if [ \"$sdk_ec\" -eq 0 ]; then\n record \"$CMD_FINAL\" \"CLI→SDK $TC_TYPE\" \"✅ 通过\" \"SDK fallback verified\"\n echo \" ✅ PASS (SDK fallback)\"\n else\n record \"$CMD_FINAL\" \"CLI→SDK $TC_TYPE\" \"⛔ 需人工验证\" \"CLI+SDK均失败\"\n echo \" ⛔ MANUAL VERIFICATION NEEDED\"\n fi\n else\n record \"$CMD_FINAL\" \"CLI $TC_TYPE\" \"⛔ 需人工验证\" \"无法提取svc/op\"\n echo \" ⛔ MANUAL VERIFICATION NEEDED\"\n fi\n else\n record \"$CMD_FINAL\" \"CLI $TC_TYPE\" \"⛔ 需人工验证\" \"CLI失败，SDK不可用\"\n echo \" ⛔ MANUAL VERIFICATION NEEDED\"\n fi\n ;;\n esac\n else\n # Non-hcloud command: enforce allowlist before execution\n if ! validate_command \"$CMD_FINAL\"; then\n record \"$CMD_FINAL\" \"CLI $TC_TYPE\" \"⛔ 需人工验证\" \"非白名单命令，未执行\"\n echo \" ⛔ MANUAL VERIFICATION NEEDED: command not in allowlist\"\n else\n if result=$(run_cmd_argv \"$CMD_FINAL\" 2>&1); then\n cmd_ec=0\n else\n cmd_ec=$?\n fi\n if [ \"$cmd_ec\" -eq 0 ] && [ -n \"$result\" ] && ! echo \"$result\" | grep -qiE \"error|not found|failed\"; then\n record \"$CMD_FINAL\" \"CLI $TC_TYPE\" \"✅ 通过\" \"executed\"\n echo \" ✅ PASS (CLI)\"\n else\n record \"$CMD_FINAL\" \"CLI $TC_TYPE\" \"❌ 失败\" \"$(echo \"$result\" | head -1)\"\n echo \" ❌ FAIL\"\n fi\n fi\n fi\n ;;\n sdk)\n if echo \"$CMD_FINAL\" | grep -qE 'python3.*huaweicloudsdk'; then\n # Extract svc/op from command for SDK test\n svc=$(echo \"$CMD_FINAL\" | grep -oP 'huaweicloudsdk\\K[a-z]+' | head -1 || echo \"\")\n if [ -n \"$svc\" ]; then\n svc_upper=$(echo \"$svc\" | tr '[:lower:]' '[:upper:]' | head -c1)$(echo \"$svc\" | tail -c+2)\n if sdk_result=$(run_sdk_test \"$svc_upper\" \"List\" \"$REGION\" 2>&1); then\n sdk_ec=0\n else\n sdk_ec=$?\n fi\n if [ \"$sdk_ec\" -eq 0 ]; then\n record \"$CMD_FINAL\" \"SDK $TC_TYPE\" \"✅ 通过\" \"SDK verified\"\n echo \" ✅ PASS (SDK)\"\n else\n record \"$CMD_FINAL\" \"SDK $TC_TYPE\" \"⛔ 需人工验证\" \"SDK调用失败\"\n echo \" ⛔ MANUAL VERIFICATION NEEDED\"\n fi\n else\n # Just try the Python command\n if result=$(run_cmd_argv \"$CMD_FINAL\" 2>&1); then\n py_ec=0\n else\n py_ec=$?\n fi\n if [ \"$py_ec\" -eq 0 ] && echo \"$result\" | grep -qiE \"SDK OK|success|PASS\"; then\n record \"$CMD_FINAL\" \"SDK $TC_TYPE\" \"✅ 通过\" \"SDK verified\"\n echo \" ✅ PASS (SDK)\"\n else\n record \"$CMD_FINAL\" \"SDK $TC_TYPE\" \"❌ 失败\" \"$(echo \"$result\" | head -2 | tr '\\n' ' ')\"\n echo \" ❌ FAIL\"\n fi\n fi\n else\n # Non-SDK command: enforce allowlist before execution\n if ! validate_command \"$CMD_FINAL\"; then\n record \"$CMD_FINAL\" \"SDK $TC_TYPE\" \"⛔ 需人工验证\" \"非白名单命令，未执行\"\n echo \" ⛔ MANUAL VERIFICATION NEEDED: command not in allowlist\"\n else\n if result=$(run_cmd_argv \"$CMD_FINAL\" 2>&1); then\n cmd_ec=0\n else\n cmd_ec=$?\n fi\n if [ \"$cmd_ec\" -eq 0 ] && [ -n \"$result\" ] && ! echo \"$result\" | grep -qiE \"error|not found|failed\"; then\n record \"$CMD_FINAL\" \"SDK $TC_TYPE\" \"✅ 通过\" \"executed as script\"\n echo \" ✅ PASS (executed as script)\"\n else\n record \"$CMD_FINAL\" \"SDK $TC_TYPE\" \"❌ 失败\" \"$(echo \"$result\" | head -1)\"\n echo \" ❌ FAIL\"\n fi\n fi\n fi\n ;;\n api)\n if echo \"$CMD_FINAL\" | grep -qE '^curl'; then\n if result=$(run_cmd_argv \"$CMD_FINAL\" 2>&1); then\n curl_ec=0\n else\n curl_ec=$?\n fi\n if [ \"$curl_ec\" -eq 0 ] && echo \"$result\" | grep -qE 'HTTP.*200|HTTP.*202'; then\n record \"$CMD_FINAL\" \"API $TC_TYPE\" \"✅ 通过\" \"API verified\"\n echo \" ✅ PASS (API)\"\n else\n record \"$CMD_FINAL\" \"API $TC_TYPE\" \"❌ 失败\" \"$(echo \"$result\" | head -1)\"\n echo \" ❌ FAIL\"\n fi\n else\n record \"$CMD_FINAL\" \"API $TC_TYPE\" \"⏭️ 跳过\" \"非curl命令，无法以API模式执行\"\n echo \" ⏭️ SKIP (not a curl command)\"\n fi\n ;;\n esac\n echo \"\"\n done\n fi\nfi\n\n# ------------------------------------------------------------------\n# Generate test report\n# ------------------------------------------------------------------\nTOTAL=$((PASS_COUNT + FAIL_COUNT + SKIP_COUNT))\nREPORT_DATE=$(date +\"%Y-%m-%d %H:%M:%S\")\nmkdir -p \"$(dirname \"$OUTPUT_FILE\")\"\n\ncat > \"$OUTPUT_FILE\" \u003c\u003c REPORT_HEADER\n# 功能测试报告 — ${SKILL_NAME}\n\n> 生成时间：${REPORT_DATE}\n> 测试区域：${REGION}\n> CLI 版本：${HCLOUD_VERSION:-未安装}\n> 执行模式：${EXECUTOR}\n\n## 测试结果汇总\n\n| 指标 | 值 |\n|------|-----|\n| 总测试数 | ${TOTAL} |\n| ✅ 通过 | ${PASS_COUNT} |\n| ❌ 失败 | ${FAIL_COUNT} |\n| ⏭️ 跳过 | ${SKIP_COUNT} |\n| 测试者 | Huawei Cloud Skill Creator v2 |\n\n## 测试详情\n\n| 操作 | 测试类型 | 结果 | 备注 |\n|------|----------|------|------|\nREPORT_HEADER\n\nfor result in \"${RESULTS_ARR[@]}\"; do\n echo \"$result\" >> \"$OUTPUT_FILE\"\ndone\n\nchmod 600 \"$OUTPUT_FILE\" 2>/dev/null || true\n\necho \"\" >> \"$OUTPUT_FILE\"\nif [ \"$FAIL_COUNT\" -eq 0 ] && [ \"$TOTAL\" -gt 0 ]; then\n echo \"**结论：✅ 全部 ${TOTAL} 项测试通过 — 可进入用户验收**\" >> \"$OUTPUT_FILE\"\nelif [ \"$FAIL_COUNT\" -gt 0 ]; then\n echo \"**结论：❌ ${FAIL_COUNT}/${TOTAL} 项测试失败 — 需要修复后重新测试**\" >> \"$OUTPUT_FILE\"\nelse\n echo \"**结论：⏭️ 无实际测试执行 — 请检查 hcloud CLI 安装和认证状态**\" >> \"$OUTPUT_FILE\"\nfi\n\necho \"\"\necho \"==========================================\"\necho \" Test Results\"\necho \"==========================================\"\necho \" PASS: $PASS_COUNT\"\necho \" FAIL: $FAIL_COUNT\"\necho \" SKIP: $SKIP_COUNT\"\necho \" Report: $OUTPUT_FILE\"\necho \"==========================================\"\n\n[ \"$FAIL_COUNT\" -eq 0 ]\n","content_type":"application/x-sh; charset=utf-8","language":"bash","size":22612,"content_sha256":"b658d7d1096bf35c4d5cece523e3741f21cd919de94236cd873fbf85fa3ce915"},{"filename":"scripts/validate-skill.sh","content":"#!/usr/bin/env bash\n# validate-skill.sh — Validate Huawei Cloud Skill structure against 华为云Skill检查规范\n# Usage: bash validate-skill.sh [-s \u003cskill-dir>] [-b \u003cbase-ref>]\n# -s Skill directory to validate (default: . ; may also be passed positionally)\n# -b Base git ref for PR diff scope check (equivalent to legacy BASE_REF env var)\nset -euo pipefail\n\nSKILL_DIR=\".\"\n\n# Python interpreter auto-detection (python3 preferred; fall back to python on Windows)\nif command -v python3 &>/dev/null 2>&1; then PY_CMD=\"python3\"; else PY_CMD=\"python\"; fi\n\nwhile getopts \":s:b:\" opt; do\n case \"$opt\" in\n s) SKILL_DIR=\"$OPTARG\" ;;\n b) BASE_REF=\"$OPTARG\" ;;\n \\?) echo \"Unknown option: -$OPTARG\" >&2; exit 1 ;;\n :) echo \"Option -$OPTARG requires an argument\" >&2; exit 1 ;;\n esac\ndone\nshift $((OPTIND - 1))\n# Backward-compat: accept skill dir as a trailing positional argument\nif [ $# -gt 0 ]; then\n SKILL_DIR=\"$1\"\nfi\n\nPASS=0\nFAIL=0\nWARN=0\n\npass() { echo \" ✅ PASS: $1\"; PASS=$((PASS + 1)); return 0; }\nfail() { echo \" ❌ FAIL: $1\"; FAIL=$((FAIL + 1)); return 1; }\nwarn() { echo \" ⚠️ WARN: $1\"; WARN=$((WARN + 1)); return 0; }\n\necho \"============================================\"\necho \" Validate Skill: $(basename \"$SKILL_DIR\")\"\necho \" Against: 华为云Skill检查规范\"\necho \"============================================\"\n\n# === CRITICAL Checks ===\necho \"\"\necho \"--- Critical Checks ---\"\n\n[ ! -d \"$SKILL_DIR\" ] && { echo \"[FATAL] Skill directory not found: $SKILL_DIR\"; QUALITY_STATUS=\"sys_fail\"; exit 1; }\n[ -f \"$SKILL_DIR/SKILL.md\" ] && pass \"SKILL.md exists\" || fail \"SKILL.md missing\"\n\nif [ -f \"$SKILL_DIR/SKILL.md\" ]; then\n # YAML Frontmatter\n grep -q '^---

Important: agents should read /llm.txt, /llms.txt, or /.well-known/skills.json to discover the public Skillopedia API.

\"$SKILL_DIR/SKILL.md\" && pass \"YAML Frontmatter present\" || fail \"Frontmatter missing\"\n grep -q '^name:' \"$SKILL_DIR/SKILL.md\" && pass \"name field present\" || fail \"name field missing\"\n grep -q '^description:' \"$SKILL_DIR/SKILL.md\" && pass \"description field present\" || fail \"description field missing\"\n\n # YAML Frontmatter syntax validation (critical): parse via yaml-check-frontmatter.py from the skill dir\n YAML_CHECK_SCRIPT=\"$(cd \"$(dirname \"${BASH_SOURCE[0]}\")\" && pwd)/yaml-check-frontmatter.py\"\n if command -v cygpath >/dev/null 2>&1; then\n YAML_CHECK_SCRIPT=\"$(cygpath -w \"$YAML_CHECK_SCRIPT\" 2>/dev/null || printf '%s' \"$YAML_CHECK_SCRIPT\")\"\n fi\n YAML_VALID=$(cd \"$SKILL_DIR\" 2>/dev/null && \"${PY_CMD}\" \"$YAML_CHECK_SCRIPT\" 2>&1) || true\n case \"$YAML_VALID\" in\n OK) pass \"YAML Frontmatter parses (yaml.safe_load)\" ;;\n NO_PYYAML) warn \"YAML deep validation skipped (PyYAML not installed)\" ;;\n ERR:*) fail \"YAML Frontmatter invalid: ${YAML_VALID#ERR:}\" || true ;;\n *) warn \"YAML validation inconclusive: $YAML_VALID\" ;;\n esac\n\n FRONTMATTER_NAME=$(sed -n '2,/^---$/s/^name:[[:space:]]*//p' \"$SKILL_DIR/SKILL.md\" | head -n 1 | tr -d '\"' | tr -d \"'\")\n if [ \"$FRONTMATTER_NAME\" = \"$(basename \"$SKILL_DIR\")\" ]; then\n pass \"name field matches directory name\"\n else\n fail \"name field '$FRONTMATTER_NAME' does not match directory '$(basename \"$SKILL_DIR\")'\" || true\n fi\n\n if grep -q '^version:' \"$SKILL_DIR/SKILL.md\" 2>/dev/null; then\n warn \"version field must be removed under Huawei Cloud Skill Specification v1.0\"\n else\n pass \"version field absent\"\n fi\n\n grep -qiE '(Triggers include:|触发词|触发条件|Use when|Use ONLY when)' \"$SKILL_DIR/SKILL.md\" && pass \"description includes trigger words or conditions\" || warn \"description trigger words or conditions missing\"\n \n grep -qiE '^##[[:space:]].*(参考文档|Reference Documents|References)' \"$SKILL_DIR/SKILL.md\" && pass \"Reference Documents section present\" || fail \"Reference Documents section missing\"\n\n # === SEC-001 — Hardcoded AK/SK literal values ===\n # Pattern: any of access_key / secret_key / ak / sk paired with a literal\n # value (>=8 chars, alphanumeric/base64-ish). Matches e.g.\n # HUAWEI_ACCESS_KEY=\"\u003cyour-access-key-id>\"\n # secret_key: '\u003cyour-secret-access-key>'\n # \"ak\": \"\u003cyour-ak-value>\"\n # Whitelist: NEVER / FORBIDDEN / 禁止 contexts (skill prose explaining\n # what NOT to do) and placeholder templates (your-*, example,\n # placeholder, replace-me, \u003cYOUR_*).\n # Comment-only lines (bash # / HTML \u003c!-- -->) are excluded: they are\n # documentation, not executable or in-band credential material, and the\n # validator's own pattern docs (this block) must not self-trigger.\n _ak=\"access[_-]?key\"\n _sk=\"secret[_-]?key\"\n _pair=\"(^|[^[:alnum:]_])(ak|sk)\"\n _value=\"[[:space:]]*[:=][[:space:]]*['\\\"]?[[:alnum:]_+/=-]{8,}\"\n _sec001_pattern=\"(${_ak}|${_sk}|${_pair})${_value}\"\n _sec001_whitelist='\\b(forbidden|never|prohibit|禁止|不得|不应|检测|detection|scan|pattern|your[-_]|example|placeholder|replace-me)\\b|\u003cYOUR|\u003cyour'\n # SEC-001 call-expression guard: a value that is an identifier immediately\n # followed by `(` is code (e.g. `ak, sk = _read_ak_sk(...)`), i.e. a\n # variable/function-call assignment — never a hardcoded credential literal.\n _sec001_call_excl='(^|[^[:alnum:]_])(ak|sk|access[_-]?key|secret[_-]?key)[[:space:]]*[:=][[:space:]]*[[:alnum:]_]+[[:space:]]*\\('\n if grep -RHniE \"${_sec001_pattern}\" \"$SKILL_DIR\" 2>/dev/null | grep -vE ':[0-9]+:[[:space:]]*(#|\u003c!--)' | grep -viE \"${_sec001_whitelist}|${_sec001_call_excl}\" > /dev/null; then\n fail \"[SEC-001] Possible hardcoded AK/SK literal values found\" || true\n else\n pass \"[SEC-001] No hardcoded AK/SK literal values\"\n fi\n\n # === SEC-002 — In-session AK/SK entry forms ===\n # Pattern: 'hcloud configure set ... --cli-(access|secret)-key=...'\n # AND basic-credentials literal kwargs (access_key=..., secret_key=...,\n # ak=..., sk=...) inside a BasicCredentials(...) call — both are\n # in-band secret-entry forms that put AK/SK on a command\n # line / SDK kwarg, contradicting the Pre-check contract:\n # 'NEVER ask the user to type or paste AK/SK in chat; user must\n # set env vars in shell profile out-of-band and re-run.'\n # Whitelist: lines that contain the patterns inside NEVER / Do NOT\n # / 禁止 / forbidden contexts (prose warnings about the anti-pattern\n # are allowed). Comment-only lines (bash # / HTML \u003c!-- -->) are\n # excluded — the validator's own pattern docs must not self-trigger.\n # Strict-mode design: one process-level pass with the whitelist applied.\n _hcloud_cfg_set='hcloud[[:space:]]+configure[[:space:]]+set[[:space:]]+.*--cli-(access|secret)-key[[:space:]]*='\n _basic_creds_literal='BasicCredentials[[:space:]]*\\([^)]*(access_key|secret_key|ak[[:space:]]*=|sk[[:space:]]*=)'\n _sec002_pattern=\"${_hcloud_cfg_set}|${_basic_creds_literal}\"\n _sec002_whitelist=\"${_sec001_whitelist}|literal\"\n if grep -RHniE \"${_sec002_pattern}\" \"$SKILL_DIR\" 2>/dev/null | grep -vE ':[0-9]+:[[:space:]]*(#|\u003c!--)' | grep -viE \"${_sec002_whitelist}\" > /dev/null; then\n fail \"[SEC-002] In-session AK/SK entry form detected outside NEVER context (hcloud configure set --cli-*-key= or BasicCredentials literal kwargs)\" || true\n else\n pass \"[SEC-002] No in-session AK/SK entry forms outside NEVER context\"\n fi\n\n CROSS_SKILL_REFS=\"\"\n if command -v git >/dev/null 2>&1 && CHECK_ROOT=$(git -C \"$SKILL_DIR\" rev-parse --show-toplevel 2>/dev/null); then\n while IFS= read -r other_skill_md; do\n other_skill_name=$(basename \"$(dirname \"$other_skill_md\")\")\n [ \"$other_skill_name\" = \"$(basename \"$SKILL_DIR\")\" ] && continue\n if grep -Fqi \"$other_skill_name\" \"$SKILL_DIR/SKILL.md\"; then\n CROSS_SKILL_REFS=$(printf '%s\\n%s' \"$CROSS_SKILL_REFS\" \"$other_skill_name\")\n fi\n done \u003c \u003c(find \"$CHECK_ROOT\" -name SKILL.md -type f 2>/dev/null)\n fi\n if grep -qiE '(\\.\\./[^[:space:]`]+/(SKILL\\.md|scripts/)|\\.agents/skills/[^[:space:]`]+)' \"$SKILL_DIR/SKILL.md\" 2>/dev/null; then\n CROSS_SKILL_REFS=$(printf '%s\\n%s' \"$CROSS_SKILL_REFS\" \"cross-directory Skill path\")\n fi\n CROSS_SKILL_REFS=$(printf '%s\\n' \"$CROSS_SKILL_REFS\" | sed '/^$/d' | sort -u)\n if [ -n \"$CROSS_SKILL_REFS\" ]; then\n fail \"Named cross-Skill references found; use Agent orchestration instead: $(printf '%s' \"$CROSS_SKILL_REFS\" | tr '\\n' ' ')\" || true\n else\n pass \"No named cross-Skill references\"\n fi\nfi\n\n# references/iam-policies.md\n[ -f \"$SKILL_DIR/references/iam-policies.md\" ] && pass \"references/iam-policies.md exists (recommended)\" || warn \"references/iam-policies.md missing (recommended)\"\n\nif command -v git >/dev/null 2>&1 && REPO_ROOT=$(git -C \"$SKILL_DIR\" rev-parse --show-toplevel 2>/dev/null); then\n if [ -n \"${BASE_REF:-}\" ]; then\n CHANGED_PATHS=$(git -C \"$REPO_ROOT\" diff --name-only \"${BASE_REF}...HEAD\" 2>/dev/null || true)\n else\n if git -C \"$REPO_ROOT\" rev-parse --quiet --verify HEAD >/dev/null 2>&1; then\n CHANGED_PATHS=$(git -C \"$REPO_ROOT\" status --porcelain 2>/dev/null | awk '{print $2}' | grep -E \"^${SKILL_DIR#\"$REPO_ROOT\"/}/\" || true)\n else\n CHANGED_PATHS=\"\"\n fi\n fi\n CHANGED_SKILL_DIRS=\"\"\n while IFS= read -r changed_path; do\n [ -n \"$changed_path\" ] || continue\n candidate=\"$REPO_ROOT/$(dirname \"$changed_path\")\"\n while [ \"$candidate\" != \"$REPO_ROOT\" ] && [ \"$candidate\" != \"$(dirname \"$candidate\")\" ]; do\n if [ -f \"$candidate/SKILL.md\" ]; then\n CHANGED_SKILL_DIRS=$(printf '%s\\n%s' \"$CHANGED_SKILL_DIRS\" \"${candidate#\"$REPO_ROOT\"/}\")\n break\n fi\n candidate=$(dirname \"$candidate\")\n done\n done \u003c\u003c\u003c \"$CHANGED_PATHS\"\n CHANGED_SKILL_DIRS=$(printf '%s\\n' \"$CHANGED_SKILL_DIRS\" | sed '/^$/d' | sort -u)\n CHANGED_SKILL_COUNT=$(printf '%s\\n' \"$CHANGED_SKILL_DIRS\" | sed '/^$/d' | wc -l | tr -d ' ')\n if [ \"$CHANGED_SKILL_COUNT\" -le 1 ]; then\n pass \"PR changes at most one Skill directory\"\n else\n fail \"PR changes $CHANGED_SKILL_COUNT Skill directories: $(printf '%s' \"$CHANGED_SKILL_DIRS\" | tr '\\n' ' ')\" || true\n fi\nelse\n warn \"One-PR-one-Skill check skipped because no Git worktree was found\"\nfi\n\n# === HIGH Checks ===\necho \"\"\necho \"--- High Priority Checks ---\"\n\n# Naming convention\nSKILL_NAME=$(basename \"$SKILL_DIR\")\nif echo \"$SKILL_NAME\" | grep -qE '^huawei-cloud-[a-z0-9]+(-[a-z0-9]+)*

Important: agents should read /llm.txt, /llms.txt, or /.well-known/skills.json to discover the public Skillopedia API.

; then\n pass \"Naming convention: $SKILL_NAME\"\nelse\n warn \"Naming convention check: $SKILL_NAME (should be huawei-cloud-{product}-{function})\"\nfi\n\n# Required sections\nfor section in \"Overview|概述\" \"Prerequisites|前置条件\" \"Workflow|工作流\" \"Core Commands|核心命令\" \"Parameter Confirmation|参数确认\"; do\n if grep -qiE \"^##[[:space:]].*($section)\" \"$SKILL_DIR/SKILL.md\"; then\n pass \"${section%%|*} section present\"\n else\n fail \"${section%%|*} section missing\" || true\n fi\ndone\n\nCLI_USED=0\nif grep -qE 'hcloud[[:space:]]+([^\u003c{[:space:]][^[:space:]]*|[\u003c{](Service|service)[}>])' \"$SKILL_DIR/SKILL.md\" 2>/dev/null; then\n CLI_USED=1\nfi\n\nif [ \"$CLI_USED\" -eq 1 ]; then\n [ -f \"$SKILL_DIR/references/cli-installation-guide.md\" ] && pass \"references/cli-installation-guide.md exists (recommended)\" || warn \"references/cli-installation-guide.md missing (recommended for CLI-based Skill)\"\nelse\n pass \"references/cli-installation-guide.md not required because no CLI command is used\"\nfi\n\n# === MEDIUM Checks ===\necho \"\"\necho \"--- Medium Priority Checks ---\"\n\nCLI_COMMAND_LINES=$(grep -E '(^[[:space:]]*hcloud[[:space:]]|`hcloud[[:space:]])' \"$SKILL_DIR/SKILL.md\" 2>/dev/null || true)\nCLI_COMMAND_COUNT=0\nSERVICE_ERRORS=0\nOPERATION_ERRORS=0\nREGION_ERRORS=0\nwhile IFS= read -r cli_line; do\n [ -n \"$cli_line\" ] || continue\n echo \"$cli_line\" | grep -qiE '(forbidden|prohibit|禁止|不得|detection|检测)' && continue\n cli_tail=$(printf '%s\\n' \"$cli_line\" | sed -E 's/^.*hcloud[[:space:]]+//')\n service=$(printf '%s\\n' \"$cli_tail\" | awk '{print $1}' | tr -d '`')\n operation=$(printf '%s\\n' \"$cli_tail\" | awk '{print $2}' | tr -d '`')\n printf '%s%s\\n' \"$service\" \"$operation\" | grep -qE '[\u003c>{}]' && continue\n [ -n \"$service\" ] && [ -n \"$operation\" ] || continue\n CLI_COMMAND_COUNT=$((CLI_COMMAND_COUNT + 1))\n echo \"$service\" | grep -qE '^[A-Z][A-Za-z0-9]*

Important: agents should read /llm.txt, /llms.txt, or /.well-known/skills.json to discover the public Skillopedia API.

|| SERVICE_ERRORS=$((SERVICE_ERRORS + 1))\n echo \"$operation\" | grep -qE '^[A-Z][A-Za-z0-9]*

Important: agents should read /llm.txt, /llms.txt, or /.well-known/skills.json to discover the public Skillopedia API.

|| OPERATION_ERRORS=$((OPERATION_ERRORS + 1))\n echo \"$cli_line\" | grep -q -- '--cli-region' || REGION_ERRORS=$((REGION_ERRORS + 1))\ndone \u003c\u003c\u003c \"$CLI_COMMAND_LINES\"\n\nif [ \"$CLI_COMMAND_COUNT\" -eq 0 ]; then\n warn \"No concrete CLI commands found\"\nelse\n [ \"$SERVICE_ERRORS\" -eq 0 ] && pass \"All concrete service names begin with uppercase/title case\" || warn \"$SERVICE_ERRORS CLI command(s) have invalid service names\"\n [ \"$OPERATION_ERRORS\" -eq 0 ] && pass \"All concrete operation names use PascalCase\" || warn \"$OPERATION_ERRORS CLI command(s) have invalid operation names\"\n [ \"$REGION_ERRORS\" -eq 0 ] && pass \"Every concrete CLI command includes --cli-region\" || warn \"$REGION_ERRORS CLI command(s) omit --cli-region\"\nfi\n\n# verification-method.md\n[ -f \"$SKILL_DIR/references/verification-method.md\" ] && pass \"references/verification-method.md exists\" || warn \"references/verification-method.md missing (recommended)\"\n\n# === LOW Checks ===\necho \"\"\necho \"--- Low Priority Checks ---\"\n\nif command -v git >/dev/null 2>&1 && git -C \"$SKILL_DIR\" rev-parse --show-toplevel >/dev/null 2>&1; then\n SKILL_PREFIX=$(git -C \"$SKILL_DIR\" rev-parse --show-prefix 2>/dev/null | sed 's:/*$::')\n if echo \"$SKILL_PREFIX\" | grep -qE '^skills/[^/]+/[^/]+/[^/]+

Important: agents should read /llm.txt, /llms.txt, or /.well-known/skills.json to discover the public Skillopedia API.

; then\n pass \"Skill path matches skills/{category}/{subcategory}/{skill-name}/\"\n else\n warn \"Skill path '$SKILL_PREFIX' does not match skills/{category}/{subcategory}/{skill-name}/\"\n fi\nelse\n warn \"Skill path layout check skipped because no Git worktree was found\"\nfi\n\nif [ \"$CLI_USED\" -eq 1 ]; then\n grep -qiE '^##[[:space:]].*(KooCLI.*(Command Format|命令格式)|CLI Command Format|CLI命令格式)' \"$SKILL_DIR/SKILL.md\" && pass \"KooCLI Command Format Standard section present\" || warn \"KooCLI Command Format Standard section missing for CLI-based Skill\"\nfi\n\n# --- Size constraints (华为云Skill检查规范 - hwcloud-spec) ---\n# 1) Total skill file content size must not exceed 40 MB\nTOTAL_BYTES=0\nwhile IFS= read -r -d '' skill_file; do\n FILE_BYTES=$(wc -c \u003c \"$skill_file\")\n TOTAL_BYTES=$((TOTAL_BYTES + FILE_BYTES))\ndone \u003c \u003c(find \"$SKILL_DIR\" -type f -print0 2>/dev/null)\nTOTAL_MB=$(( (TOTAL_BYTES + 1048575) / 1048576 ))\nif [ \"$TOTAL_BYTES\" -le 41943040 ]; then\n pass \"Total file content size ≤ 40 MB (${TOTAL_MB} MB)\"\nelse\n fail \"Total file content size exceeds 40 MB (${TOTAL_MB} MB). Split or remove large files.\" || true\nfi\n\n# 2) Total file count must not exceed 30\nTOTAL_FILES=$(find \"$SKILL_DIR\" -type f 2>/dev/null | wc -l)\nif [ \"$TOTAL_FILES\" -le 30 ]; then\n pass \"Total file count ≤ 30 ($TOTAL_FILES files)\"\nelse\n fail \"Total file count exceeds 30 ($TOTAL_FILES files). Consolidate or remove redundant files.\" || true\nfi\n\n# 3) SKILL.md line count must not exceed 500\nif [ -f \"$SKILL_DIR/SKILL.md\" ]; then\n SKILL_LINES=$(wc -l \u003c \"$SKILL_DIR/SKILL.md\")\n if [ \"$SKILL_LINES\" -le 500 ]; then\n pass \"SKILL.md lines ≤ 500 ($SKILL_LINES lines)\"\n else\n fail \"SKILL.md exceeds 500 lines ($SKILL_LINES lines). Split content into references/.\" || true\n fi\nfi\n\nALLOWED_EXTENSIONS=\"md mdx txt json json5 yaml yml toml js cjs mjs ts tsx jsx py sh ps1 psm1 psd1 r rb go rs swift kt java cs cpp c h hpp sql csv tsv ini cfg conf env properties dat xml html css scss sass svg\"\nINVALID_EXTENSION_FILES=\"\"\nwhile IFS= read -r -d '' skill_file; do\n base_name=$(basename \"$skill_file\")\n if [[ \"$base_name\" == *.* ]]; then\n extension=${base_name##*.}\n extension=$(printf '%s' \"$extension\" | tr '[:upper:]' '[:lower:]')\n else\n extension=\"\"\n fi\n case \" $ALLOWED_EXTENSIONS \" in\n *\" $extension \"*) ;;\n *) INVALID_EXTENSION_FILES=$(printf '%s\\n%s' \"$INVALID_EXTENSION_FILES\" \"${skill_file#\"$SKILL_DIR\"/}\") ;;\n esac\ndone \u003c \u003c(find \"$SKILL_DIR\" -type f -print0 2>/dev/null)\nINVALID_EXTENSION_FILES=$(printf '%s\\n' \"$INVALID_EXTENSION_FILES\" | sed '/^$/d')\nif [ -z \"$INVALID_EXTENSION_FILES\" ]; then\n pass \"All files use one of the 46 allowed extensions\"\nelse\n fail \"Files without an allowed extension: $(printf '%s' \"$INVALID_EXTENSION_FILES\" | tr '\\n' ' ')\" || true\nfi\n\n# acceptance-criteria.md\n[ -f \"$SKILL_DIR/references/acceptance-criteria.md\" ] && pass \"references/acceptance-criteria.md exists\" || warn \"references/acceptance-criteria.md missing (recommended)\"\n\n# kebab-case references\nkebab_ok=0\nkebab_total=0\nwhile IFS= read -r -d '' ref; do\n kebab_total=$((kebab_total + 1))\n base=$(basename \"$ref\")\n if echo \"$base\" | grep -qE '^[a-z0-9]+(-[a-z0-9]+)*\\.[a-z0-9]+

Important: agents should read /llm.txt, /llms.txt, or /.well-known/skills.json to discover the public Skillopedia API.

; then\n kebab_ok=$((kebab_ok + 1))\n fi\ndone \u003c \u003c(find \"$SKILL_DIR/references\" -type f -print0 2>/dev/null)\n[ \"$kebab_total\" -gt 0 ] && [ \"$kebab_ok\" -eq \"$kebab_total\" ] && pass \"All reference files use kebab-case\" || warn \"Some reference files don't use kebab-case\"\n\n# CLI write operation confirmation\nif grep -qiE '(Create|Delete|Update)' \"$SKILL_DIR/SKILL.md\" 2>/dev/null; then\n grep -qiE '确认|confirm|用户确认' \"$SKILL_DIR/SKILL.md\" && pass \"Write operation confirmation mentioned\" || warn \"Write operations may need user confirmation\"\nfi\n\n# === Summary ===\necho \"\"\necho \"============================================\"\necho \" Validation Summary\"\necho \" PASS: $PASS FAIL: $FAIL WARN: $WARN\"\necho \"============================================\"\n\n[ \"$FAIL\" -gt 0 ] && QUALITY_STATUS=\"sys_fail\"\n[ \"$FAIL\" -eq 0 ] && exit 0 || exit 1\n","content_type":"application/x-sh; charset=utf-8","language":"bash","size":17904,"content_sha256":"b222e10ae3d342a803d640c7aa3b17d7708eba00e1fa75237ae5bd1e1ee47a7d"},{"filename":"scripts/yaml-check-frontmatter.py","content":"#!/usr/bin/env python3\n# -*- coding: utf-8 -*-\n\"\"\"yaml-check-frontmatter.py — 校验 SKILL.md 头部 YAML frontmatter 合法性。\n\n用法: 在 skill 目录下运行 (读取 ./SKILL.md):\n python yaml-check-frontmatter.py\n\n输出与退出码:\n OK (exit 0) -> frontmatter 是合法 YAML 且字段合规\n ERR:\u003cdetail> (exit 1) -> 语法或字段错误\n NO_PYYAML (exit 0) -> 未安装 PyYAML, 深度校验跳过(由调用方降级)\n\"\"\"\nimport sys\nfrom pathlib import Path\n\n\ndef main() -> int:\n try:\n import yaml # noqa: F401\n except Exception:\n print(\"NO_PYYAML\")\n return 0\n\n try:\n text = Path(\"SKILL.md\").read_text(encoding=\"utf-8\")\n except Exception as e:\n print(f\"ERR:read {e}\")\n return 1\n\n if not text.startswith(\"---\"):\n print(\"ERR:frontmatter must start with ---\")\n return 1\n\n parts = text.split(\"---\", 2)\n if len(parts) \u003c 3:\n print(\"ERR:closing --- missing\")\n return 1\n\n try:\n data = yaml.safe_load(parts[1])\n except Exception as e:\n print(\"ERR:yaml \" + str(e).replace(\"\\n\", \" \")[:200])\n return 1\n\n if not isinstance(data, dict):\n print(\"ERR:root must be a map\")\n return 1\n\n errs = []\n if not str(data.get(\"name\") or \"\").strip():\n errs.append(\"name empty\")\n if not str(data.get(\"description\") or \"\").strip():\n errs.append(\"description empty\")\n if \"tags\" in data and not isinstance(data[\"tags\"], list):\n errs.append(\"tags must be a list\")\n if isinstance(data.get(\"tags\"), list) and len(data[\"tags\"]) > 5:\n errs.append(\"tags > 5\")\n if \"version\" in data:\n errs.append(\"version field must be absent\")\n\n if errs:\n print(\"ERR:fields \" + \"; \".join(errs))\n return 1\n\n print(\"OK\")\n return 0\n\n\nif __name__ == \"__main__\":\n sys.exit(main())","content_type":"text/x-python; charset=utf-8","language":"python","size":1898,"content_sha256":"539c9faa82406d09992772e875892381aaca1d91a8899c6e942debb4587aa7f9"},{"filename":"templates/test-defaults.json","content":"{\n \"request_defaults\": {\n \"region\": \"cn-north-1\",\n \"limit\": 10,\n \"offset\": 0\n },\n \"notes\": \"BSS (GlobalCredentials) 仅支持 cn-north-1；KooCLI/SDK 占位符业务参数使用本默认值回填，避免区域/limit 等环境口径造成的伪失败。\"\n}","content_type":"application/json; charset=utf-8","language":"json","size":268,"content_sha256":"b43713727a94e0bf5cf4333d233ac5c2988a0fbffc28ce717a380b2085c56332"},{"filename":"templates/test-vars.json","content":"{\n \"skill_name\": \"huawei-cloud-{product}-{function}\",\n \"region\": \"cn-north-4\",\n \"test_cases\": [\n {\n \"id\": \"TC-01\",\n \"name\": \"CLI 服务可用性检查\",\n \"command\": \"hcloud ECS --help\",\n \"expected\": \"帮助信息正常输出，命令存在\",\n \"type\": \"syntax\",\n \"executor\": \"cli\"\n },\n {\n \"id\": \"TC-02\",\n \"name\": \"CLI 只读操作实时测试\",\n \"command\": \"hcloud ECS ListFlavors --cli-region=cn-north-4 --limit=1\",\n \"expected\": \"返回正常数据，无错误\",\n \"type\": \"readonly\",\n \"executor\": \"cli\"\n },\n {\n \"id\": \"TC-03\",\n \"name\": \"SDK 可用性检查\",\n \"command\": \"python3 -c \\\"import importlib.util as u; print('SDK OK' if u.find_spec('huaweicloudsdkcore') else 'SKIP: SDK not installed')\\\"\",\n \"expected\": \"SDK 导入成功或提示未安装\",\n \"type\": \"syntax\",\n \"executor\": \"sdk\"\n },\n {\n \"id\": \"TC-04\",\n \"name\": \"CLI 只读操作测试（真实 API 链路由 hcloud CLI 承载）\",\n \"command\": \"hcloud ECS ListFlavors --cli-region=cn-north-4 --limit=1\",\n \"expected\": \"返回正常数据\",\n \"type\": \"readonly\",\n \"executor\": \"cli\"\n }\n ],\n \"env_vars_required\": [\n \"以 HUAWEI/HW/HWC 开头的环境变量中匹配 AK/SK 的键值对\"\n ],\n \"notes\": \"CLI 用例使用真实可用的 hcloud 只读命令（hcloud ECS --help / ECS ListFlavors，区域 cn-north-4）。SDK/API 用例不依赖未安装的 huaweicloudsdk 或伪造 endpoint，缺依赖时输出 SKIP 提示并退出 0，避免占位符/环境口径导致的伪失败。未替换的占位符会被 test-cli-commands.sh 拦截并标记为需人工验证，不会执行。自带脚本冒烟：为 scripts/ 内每个脚本生成 1 条正例（有 --help/-h 用 --help；否则 bash -n \u003c脚本绝对路径> 语法检查），脚本路径解析为绝对路径后写入 test_cases，避免相对路径失效。（取舍说明：CLI 服务可用性检查一条（TC-01）使用 `hcloud ECS --help` 而非裸 `hcloud --help`——两者均为 CLI 可用性检查；带服务名的形态可被评测流水线 Phase 2 的服务探测逻辑识别为 CLI 执行器，避免把 CLI 命令误标为 sdk 执行器后执行失败。TC-04 原为与 TC-03 重复的 SDK 存在性检查，非真实只读操作，已移除，避免假阳性；TC-05 原以 hcloud CLI 冒充 API 用例且未使用 endpoint/path 示例，已改为 CLI 只读用例并删除 endpoint/path 字段；生成具体服务时如需真实 SDK/API 只读用例，请在 Phase 4 按目标服务补充 huaweicloudsdk/API 签名用例。）\"\n}","content_type":"application/json; charset=utf-8","language":"json","size":2615,"content_sha256":"632bf0a8f9d404d6dc5ec3c8009104b34b0861af29fccf726eff620990385964"}],"content_json":{"type":"doc","content":[{"type":"heading","attrs":{"level":1},"content":[{"text":"Huawei Cloud Skill Creator v2","type":"text"}]},{"type":"blockquote","content":[{"type":"paragraph","content":[{"text":"Six-Phase Strict Pipeline","type":"text","marks":[{"type":"strong"}]},{"text":" — Each phase depends on the previous phase's output and cannot be skipped. If any phase is missing, restart from the missing phase.","type":"text"}]}]},{"type":"hr","attrs":{"markup":"---"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"Overview","type":"text"}]},{"type":"paragraph","content":[{"text":"The Huawei Cloud Skill Creator v2 is based on a six-phase strict pipeline: starting with Socratic Q&A requirements analysis, followed by technical research (CLI→SDK→API three-level fallback), document generation, test preparation, detailed testing, resource cleanup and compliance check, ultimately generating a complete skill package that conforms to the Huawei Cloud Skill Specification. It only creates/packages skills — it does not directly operate cloud resources (no creating/deleting/modifying ECS, VPC, OBS, etc.); use it to generate a management Skill or use another dedicated management Skill for cloud-resource operations.","type":"text"}]},{"type":"paragraph","content":[{"text":"Dependency","type":"text","marks":[{"type":"strong"}]},{"text":": Quality telemetry is collected automatically via skill-quality-cli (installed by scripts/ensure_cli.sh if absent).","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Pre-check: Huawei Cloud Credentials Required","type":"text"}]},{"type":"blockquote","content":[{"type":"paragraph","content":[{"text":"Mandatory gate.","type":"text","marks":[{"type":"strong"}]},{"text":" This pre-check MUST pass before invoking any hcloud / huaweicloudsdk command — including Phase 2 research, Phase 4/5 testing, and Phase 6 validation. If no valid credential profile is detected, STOP and obtain credentials ","type":"text"},{"text":"out-of-band","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Security Rules","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"NEVER","type":"text","marks":[{"type":"strong"}]},{"text":" read, echo, or print AK/SK values (e.g., printing the value of an HUAWEI_ACCESS_KEY-style env var is ","type":"text"},{"text":"FORBIDDEN","type":"text","marks":[{"type":"strong"}]},{"text":").","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"NEVER","type":"text","marks":[{"type":"strong"}]},{"text":" read or cat the on-disk credential files for hcloud, obsutil, the SDK, or any other secret-storing location. Treat all such files as confidential.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"NEVER","type":"text","marks":[{"type":"strong"}]},{"text":" ask the user to input AK/SK directly in the conversation or command line.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"NEVER","type":"text","marks":[{"type":"strong"}]},{"text":" invoke hcloud configure set with literal credential strings passed via the CLI's cli-\u003cak-flag> / cli-\u003csk-flag> parameters or any equivalent in-band secret-entry form.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"ONLY","type":"text","marks":[{"type":"strong"}]},{"text":" use hcloud configure list to check credential status — non-interactive, read-only, no secrets echoed.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 0: Ensure skill-quality-cli is installed","type":"text"}]},{"type":"paragraph","content":[{"text":"Before running any wrapped ","type":"text"},{"text":"hcloud","type":"text","marks":[{"type":"code_inline"}]},{"text":" command in a fresh environment, run the idempotent installer first:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"bash scripts/ensure_cli.sh","type":"text"}]},{"type":"paragraph","content":[{"text":"ensure_cli.sh","type":"text","marks":[{"type":"code_inline"}]},{"text":" is non-blocking by design (warns and exits 0 even on failure), so ","type":"text"},{"text":"verify it actually works","type":"text","marks":[{"type":"strong"}]},{"text":"; if the CLI is still missing, run the fail-closed manual installer:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"command -v skill-quality-cli >/dev/null 2>&1 && skill-quality-cli version >/dev/null 2>&1 || bash scripts/install_cli.sh","type":"text"}]},{"type":"paragraph","content":[{"text":"Failure handling","type":"text","marks":[{"type":"strong"}]},{"text":": if ","type":"text"},{"text":"skill-quality-cli","type":"text","marks":[{"type":"code_inline"}]},{"text":" remains unavailable after ","type":"text"},{"text":"install_cli.sh","type":"text","marks":[{"type":"code_inline"}]},{"text":" (network / checksum / platform), ","type":"text"},{"text":"terminate the Pre-check","type":"text","marks":[{"type":"strong"}]},{"text":" — do not fall back to bare ","type":"text"},{"text":"hcloud","type":"text","marks":[{"type":"code_inline"}]},{"text":" (the Mandatory wrapper below applies to every hcloud call; the bundled quality-CLI installer ships in created skills as ","type":"text"},{"text":"scripts/ensure_cli.sh","type":"text","marks":[{"type":"code_inline"}]},{"text":" + ","type":"text"},{"text":"scripts/install_cli.sh","type":"text","marks":[{"type":"code_inline"}]},{"text":").","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Verification Steps","type":"text"}]},{"type":"blockquote","content":[{"type":"paragraph","content":[{"text":"⚠️ Mandatory: every ","type":"text","marks":[{"type":"strong"}]},{"text":"hcloud","type":"text","marks":[{"type":"code_inline"},{"type":"strong"}]},{"text":" command in this skill MUST be wrapped with ","type":"text","marks":[{"type":"strong"}]},{"text":"skill-quality-cli run --skill-name huawei-cloud-skill-creator -- ","type":"text","marks":[{"type":"code_inline"},{"type":"strong"}]},{"text":" — bare ","type":"text","marks":[{"type":"strong"}]},{"text":"hcloud","type":"text","marks":[{"type":"code_inline"},{"type":"strong"}]},{"text":" calls are strictly forbidden.","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"skill-quality-cli run --skill-name huawei-cloud-skill-creator -- hcloud configure list\nskill-quality-cli run --skill-name huawei-cloud-skill-creator -- hcloud ECS ListFlavors --cli-region=cn-north-4 --help","type":"text"}]},{"type":"paragraph","content":[{"text":"Check the output for a valid profile (AK/SK, or temporary security credentials / agency-assumed role).","type":"text"}]},{"type":"paragraph","content":[{"text":"If no valid profile exists, ","type":"text"},{"text":"STOP","type":"text","marks":[{"type":"strong"}]},{"text":" here.","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Obtain credentials from ","type":"text"},{"text":"Huawei Cloud Console","type":"text","marks":[{"type":"strong"}]},{"text":" → 身份与访问管理 (IAM) → 我的凭证 → 新增访问密钥.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Output","type":"text","marks":[{"type":"strong"}]},{"text":" the following copy-paste ready env-var setup block to the user (fill in real values ","type":"text"},{"text":"outside","type":"text","marks":[{"type":"strong"}]},{"text":" of this session, never in chat). The Agent must ","type":"text"},{"text":"NEVER","type":"text","marks":[{"type":"strong"}]},{"text":" ask the user to type the AK/SK value in the conversation — only emit the template below:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Set Huawei Cloud credentials using the standard HUAWEICLOUD_SDK_* names\n# (read by hcloud CLI and huaweicloudsdk). The secret key is entered silently.\nexport HUAWEICLOUD_SDK_AK=\"\u003cyour-access-key-id>\"\nread -rs HUAWEICLOUD_SDK_SK; export HUAWEICLOUD_SDK_SK\nexport HUAWEICLOUD_SDK_REGION=\"cn-north-4\"\n# 临时凭证(可选): export HUAWEICLOUD_SDK_SECURITY_TOKEN=\"\u003ctemporary-token>\"","type":"text"}]},{"type":"paragraph","content":[{"text":"Optional alternative (interactive out-of-band step only, never with literal values): run hcloud configure interactively in the user's terminal, then verify the result with hcloud configure list.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"After the user confirms they have configured env vars (or run hcloud configure), re-run skill-quality-cli run --skill-name huawei-cloud-skill-creator -- hcloud configure list. If the profile is valid → resume Phase 1. If still missing → terminate, do not proceed.","type":"text"}]}]}]},{"type":"blockquote","content":[{"type":"paragraph","content":[{"text":"Reuse the active CLI profile for all subsequent hcloud and huaweicloudsdk calls.","type":"text","marks":[{"type":"strong"}]},{"text":" Do not print or hardcode secrets. Do not replace this gate with obsutil config, hcloud configure set with literal arguments, SDK credentials constructors filled with literal strings (for example, the SDK's BasicCredentials built from string literals rather than env vars), or any other in-session secret-entry flow.","type":"text"}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Credential Source Priority","type":"text"}]},{"type":"paragraph","content":[{"text":"When invoking commands later (Phase 2/4/5), the skill accepts credentials in this priority order:","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Environment variables","type":"text","marks":[{"type":"strong"}]},{"text":" — auto-scan all variables prefixed with HUAWEI / HW / HWC whose names contain ACCESS_KEY / _AK / SECRET_KEY / _SK.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"hcloud configure list profile","type":"text","marks":[{"type":"strong"}]},{"text":" — active CLI profile (verified via hcloud configure list in the Pre-check); preferred for hcloud calls.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"IAM agency / temporary credentials","type":"text","marks":[{"type":"strong"}]},{"text":" — AK/SK + SecurityToken (programmatic access).","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"If ","type":"text"},{"text":"none","type":"text","marks":[{"type":"strong"}]},{"text":" of the above are available when Phase 4/5 testing starts, prompt the user once to configure them out-of-band and re-run the pre-check. If still unavailable, ","type":"text"},{"text":"terminate the process","type":"text","marks":[{"type":"strong"}]},{"text":" — strictly prohibited from skipping credential-required steps.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Prerequisites","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"hcloud CLI","type":"text","marks":[{"type":"strong"}]},{"text":" installed and authenticated — Reference: https://support.huaweicloud.com/qs-hcli/hcli_02_003.html","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Authentication verified via the ","type":"text"},{"text":"Pre-check","type":"text","marks":[{"type":"strong"}]},{"text":" above (hcloud configure list).","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Python 3.8+","type":"text","marks":[{"type":"strong"}]},{"text":" with huaweicloudsdk packages — install on demand: pip install huaweicloudsdkcore huaweicloudsdkecs. Verify with python3 -c \"import huaweicloudsdkcore\" before Phase 2/4/5. SDK Reference: https://console.huaweicloud.com/apiexplorer/#/sdkcenter","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Node.js + npx","type":"text","marks":[{"type":"strong"}]},{"text":" available","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Huawei Cloud AK/SK","type":"text","marks":[{"type":"strong"}]},{"text":" — Auto-scan all environment variables prefixed HUAWEI / HW / HWC matching ACCESS_KEY / _AK / SECRET_KEY / _SK. Hardcoding AK/SK in scripts, docs, or command lines is ","type":"text"},{"text":"forbidden","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"API Reference","type":"text","marks":[{"type":"strong"}]},{"text":": https://console.huaweicloud.com/apiexplorer/#/openapi","type":"text"}]}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"skill-quality-cli","type":"text","marks":[{"type":"strong"}]},{"text":" — ensured by bash scripts/ensure_cli.sh (idempotent, skips if present)","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Upgrade: run skill-quality-cli upgrade manually (no auto-upgrade)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Disable telemetry report: set SKILL_QUALITY_REPORT=0","type":"text"}]}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Workflow — Six-Phase Strict Pipeline","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":""},"content":[{"text":"Phase 1 (Q&A) → Phase 2 (Tech Research) → Phase 3 (Generate MD)\n → Phase 4 (Test Prep) → Phase 5 (Detailed Testing) → Phase 6 (Cleanup & Report)","type":"text"}]},{"type":"paragraph","content":[{"text":"Strict Rules:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Each phase ","type":"text"},{"text":"must","type":"text","marks":[{"type":"strong"}]},{"text":" output a phase summary (phase-N-summary)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Before starting each phase, ","type":"text"},{"text":"must","type":"text","marks":[{"type":"strong"}]},{"text":" verify that the previous phase's summary file exists","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"After all 6 phases are completed, perform a ","type":"text"},{"text":"final check","type":"text","marks":[{"type":"strong"}]},{"text":" for any missing phases. If any are missing, restart from the missing phase","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Skipping any phase is strictly prohibited","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"The ","type":"text"},{"text":"Pre-check: Huawei Cloud Credentials Required","type":"text","marks":[{"type":"strong"}]},{"text":" gate must have passed before any Phase 2 research or Phase 4/5 execution begins","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 1: Requirements Analysis (Socratic Q&A)","type":"text"}]},{"type":"paragraph","content":[{"text":"Goal:","type":"text","marks":[{"type":"strong"}]},{"text":" Clarify user requirements through question-by-question dialogue.","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Ask ","type":"text"},{"text":"one question","type":"text","marks":[{"type":"strong"}]},{"text":" at a time, wait for the user's response","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Cover the following dimensions:","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Target Service","type":"text","marks":[{"type":"strong"}]},{"text":" — Which Huawei Cloud service? (ECS, VPC, OBS, RDS, BSS, etc.)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Feature Scope","type":"text","marks":[{"type":"strong"}]},{"text":" — What should the Skill do? (Query, Diagnose, Deploy, Monitor, Manage)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Execution Mode","type":"text","marks":[{"type":"strong"}]},{"text":" — Prefer CLI / SDK / API?","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"CLI Operations","type":"text","marks":[{"type":"strong"}]},{"text":" — Which operations are involved? (List, Show, Create, Delete, Update)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Trigger Scenarios","type":"text","marks":[{"type":"strong"}]},{"text":" — When would an Agent invoke this? (Daily inspection, troubleshooting, auto-scaling)","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"After every 5 questions or covering all dimensions → Display requirements summary table → Wait for user confirmation","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"🛑 Do NOT proceed to Phase 2 until the user has explicitly confirmed","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"paragraph","content":[{"text":"Output:","type":"text","marks":[{"type":"strong"}]},{"text":" phase-1-summary.json — User-confirmed requirements description","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 2: Technical Research (CLI→SDK→API Three-Level Fallback)","type":"text"}]},{"type":"paragraph","content":[{"text":"Dependency:","type":"text","marks":[{"type":"strong"}]},{"text":" Phase 1 requirements analysis completed (phase-1-summary.json exists)","type":"text"}]},{"type":"paragraph","content":[{"text":"For each feature point confirmed in Phase 1, research availability in the following order:","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"CLI","type":"text","marks":[{"type":"strong"}]},{"text":" — hcloud command. Run hcloud \u003cService> \u003cOperation> --cli-region=cn-north-4 --help; the command exists when parameters are validated.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"SDK","type":"text","marks":[{"type":"strong"}]},{"text":" — huaweicloudsdk. Run python3 -c \"from huaweicloudsdk{service}.v2 import ...\"; the SDK package is available when the class imports.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"API","type":"text","marks":[{"type":"strong"}]},{"text":" — ","type":"text"},{"text":"Only from the following two sources","type":"text","marks":[{"type":"strong"}]},{"text":"; endpoint must come from a trusted source, never inferred.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Core Rule: API Endpoint Forensics (No Guessing)","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"API endpoints are ","type":"text"},{"text":"only allowed","type":"text","marks":[{"type":"strong"}]},{"text":" from the following two sources. ","type":"text"},{"text":"Strictly prohibited from inferring through naming patterns","type":"text","marks":[{"type":"strong"}]},{"text":":","type":"text"}]},{"type":"table","attrs":{"layout":null},"content":[{"type":"tr","content":[{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Trusted Source","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Method","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"① SDK source _http_info / resource_path","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"grep -A8 the _http_info method in {service}_client.py, then read the resource_path value","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"② Huawei Cloud API Explorer (api-explorer.huaweicloud.com)","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"User searches and confirms on that website","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"❌ Strictly prohibited actions:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Inferring new endpoints based on other API path patterns (e.g., inferring claim-vouchers endpoint from coupons endpoint)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Constructing URIs yourself based on documentation descriptions","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Using \"common naming patterns\" to guess API paths","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"If the SDK is available but the corresponding function has no method in ","type":"text"},{"text":"_http_info","type":"text","marks":[{"type":"code_inline"}]},{"text":" → Mark ⛔, do not infer","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Execution Rules:","type":"text","marks":[{"type":"strong"}]}]},{"type":"code_block","attrs":{"wrap":false,"language":""},"content":[{"text":"Research feature point N\n ├── CLI available → Record as CLI mode, record specific command\n ├── CLI unavailable → Check SDK\n │ ├── SDK available → Record as SDK mode\n │ │ ├── Read all _http_info methods from SDK source to obtain real REST paths\n │ │ │ grep \"resource_path\" \u003csdk_path>/{service}_client.py\n │ │ └── Feature point's corresponding method has _http_info in SDK → Record real API endpoint\n │ │ Feature point's corresponding method has no _http_info in SDK → Mark ⛔, do not infer\n │ ├── SDK unavailable → Ask user to confirm endpoint from API Explorer\n │ │ ├── User finds endpoint from API Explorer → Record as API mode, note the source\n │ │ ├── User provides endpoint (other source) → Record as API mode, mark ⚠ user-provided\n │ │ └── User cannot provide → Mark ⛔\n │ └── SDK partially available (some methods missing and no corresponding _http_info) → Mark missing features as ⛔\n └── Generate feature point research result (including execution mode + real API path if available)","type":"text"}]},{"type":"paragraph","content":[{"text":"🛑 Agent is strictly forbidden from guessing/fabricating API paths on its own. If neither the SDK source nor API Explorer has the endpoint, mark it ⛔ — it doesn't exist.","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"Tips for finding SDK client source paths:","type":"text","marks":[{"type":"strong"}]}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"python3 -c \"import huaweicloudsdk{service}.v2 as m; import os; print(os.path.dirname(m.__file__))\" # package path\ngrep \"_http_info\" \u003cpath>/{service}_client.py # all API endpoints\ngrep -A8 \"_{method}_http_info\" \u003cpath>/{service}_client.py # \"resource_path\" = real REST endpoint","type":"text"}]},{"type":"paragraph","content":[{"text":"Output:","type":"text","marks":[{"type":"strong"}]},{"text":" phase-2-summary.json — Execution mode (CLI/SDK/API/⛔) and corresponding command/code/API path for each feature point","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 3: Document Generation","type":"text"}]},{"type":"paragraph","content":[{"text":"Dependency:","type":"text","marks":[{"type":"strong"}]},{"text":" Phase 2 technical research completed (phase-2-summary.json exists)","type":"text"}]},{"type":"paragraph","content":[{"text":"Generate Skill files based on Phase 2 conclusions:","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Name the Skill","type":"text","marks":[{"type":"strong"}]},{"text":" — Use huawei-cloud-{product}-{function} and make the frontmatter name match the directory name.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Language","type":"text","marks":[{"type":"strong"}]},{"text":" — Generate SKILL.md in ","type":"text"},{"text":"English","type":"text","marks":[{"type":"strong"}]},{"text":" by default. Chinese documentation may be added in references/ as supplementary. The main SKILL.md must use English for frontmatter description, section titles, command examples, and all explanatory content.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Frontmatter","type":"text","marks":[{"type":"strong"}]},{"text":" — Include name, description with a feature summary and trigger conditions, and no more than five tags. Do not generate a version field.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Create directory structure:","type":"text","marks":[{"type":"strong"}]}]},{"type":"code_block","attrs":{"wrap":false,"language":"text"},"content":[{"text":"skills/{skill-name}/ → SKILL.md, references/ (iam-policies.md recommended; cli-installation-guide.md recommended when CLI is used; verification-method.md / dataflow-diagram.md / acceptance-criteria.md recommended), scripts/test-cli-commands.sh, scripts/ensure_cli.sh + scripts/install_cli.sh (quality CLI, required — see rule 14), templates/test-vars.json","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"SKILL.md content generation rules:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"CLI","type":"text","marks":[{"type":"strong"}]},{"text":" — command format: hcloud \u003cService> \u003cOperation> --cli-region={region} [--params] (template; replace placeholders with real values before execution)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"SDK","type":"text","marks":[{"type":"strong"}]},{"text":" — Python script example (python3 -c \"...\") with real SDK client calls","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"API","type":"text","marks":[{"type":"strong"}]},{"text":" — curl command + user-provided endpoint (mark as user-provided)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Unavailable","type":"text","marks":[{"type":"strong"}]},{"text":" — mark requires manual verification, do not generate specific commands","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Required sections in SKILL.md:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"YAML Frontmatter (Critical) — must parse as valid YAML via yaml.safe_load: name + description (feature summary + trigger conditions) + tags (list, ≤5); no version field","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Overview (High) — feature overview, architecture, applicable scenarios","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Prerequisites (High) — CLI version, authentication configuration, IAM permissions","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Workflow (High) — skill workflow steps","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Core Commands (High) — command examples grouped by function (real, executable commands only)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Parameter Confirmation (High) — user-configurable parameter table","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Reference Documents (Critical) — links to documents under references/","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"KooCLI Command Format Standard (Low) — required when CLI is involved; service, operation, region, and parameter syntax","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Generate Mermaid data flow diagram","type":"text","marks":[{"type":"strong"}]},{"text":" → references/dataflow-diagram.md.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Generate IAM policies","type":"text","marks":[{"type":"strong"}]},{"text":" → references/iam-policies.md using least privilege. ","type":"text"},{"text":"IAM authoring rules (mandatory):","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"严禁虚构伪造","type":"text","marks":[{"type":"strong"}]},{"text":" — never invent, guess, or fabricate IAM Action names, system-policy names, or syntax.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"必须官方核实","type":"text","marks":[{"type":"strong"}]},{"text":" — verify through at least one official source:","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"KooCLI Schema query","type":"text","marks":[{"type":"strong"}]},{"text":": hcloud IAM GetAuthorizationSchemaV5 --cli-region=cn-north-4 --service_code=\u003cservice_code> — copy the exact name and urn_template values from the response; do not re-capitalize or normalize them.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"官方文档核对","type":"text","marks":[{"type":"strong"}]},{"text":" — Huawei Cloud 《权限及授权项说明》 / 《API参考》 to confirm the standard service:resource_type:action naming.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"系统策略查询","type":"text","marks":[{"type":"strong"}]},{"text":" — hcloud IAM ListPoliciesV5 + hcloud IAM GetPolicyVersionV5 to verify real system-policy names and the exact JSON syntax (document field).","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"策略版本（Version）标准","type":"text","marks":[{"type":"strong"}]},{"text":"：","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"IAM 5.0 身份策略使用 \"Version\": \"5.0\"（系统策略与现代自定义策略标准；已验证格式如 {\"Version\":\"5.0\",\"Statement\":[{\"Effect\":\"Allow\",\"Action\":[...]}]}）。","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"仅当兼容传统 IAM v3 模板时使用 \"Version\": \"1.1\"。","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"禁止书写未经官方验证的版本号","type":"text","marks":[{"type":"strong"}]},{"text":"（如 \"1.0\"）。","type":"text"}]}]}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Record API references","type":"text","marks":[{"type":"strong"}]},{"text":" — Keep verified API paths in phase-2-summary.json. If a generated Skill needs reusable API documentation, add a reference file under references/ using an allowed kebab-case filename.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Package limits","type":"text","marks":[{"type":"strong"}]},{"text":" — Total file content size ≤ 40 MB, total files ≤ 30, and SKILL.md ≤ 500 lines. Split oversized SKILL.md content into references/.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"File extension allowlist","type":"text","marks":[{"type":"strong"}]},{"text":" — Every file must have one of these 46 extensions: .md, .mdx, .txt, .json, .json5, .yaml, .yml, .toml, .js, .cjs, .mjs, .ts, .tsx, .jsx, .py, .sh, .ps1, .psm1, .psd1, .r, .rb, .go, .rs, .swift, .kt, .java, .cs, .cpp, .c, .h, .hpp, .sql, .csv, .tsv, .ini, .cfg, .conf, .env, .properties, .dat, .xml, .html, .css, .scss, .sass, .svg. Files without an extension or outside this allowlist must be removed or renamed.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"YAML frontmatter format check","type":"text","marks":[{"type":"strong"}]},{"text":" — SKILL.md frontmatter must be a valid YAML doc: root map, name/description non-empty, tags ≤5, no version, block scalar description. A stray :/quote/misindent invalidates the frontmatter (critical); regenerate before proceeding.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Change scope","type":"text","marks":[{"type":"strong"}]},{"text":" — A pull request must change only one Skill directory. Use bash scripts/validate-skill.sh -s {skill-path} -b \u003cbase-ref> to validate the PR diff when a base ref is available.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Quality-CLI integration (required for every generated skill)","type":"text","marks":[{"type":"strong"}]},{"text":" — the generated skill must carry the same quality-reporting capability as this creator skill itself (skill-quality-cli telemetry, opt-out via SKILL_QUALITY_REPORT=0):","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Scripts","type":"text","marks":[{"type":"strong"}]},{"text":": copy scripts/ensure_cli.sh and scripts/install_cli.sh from THIS skill's scripts/ into the generated skill's scripts/ (identical content — do not hand-rewrite).","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"SKILL.md 4-point embed","type":"text","marks":[{"type":"strong"}]},{"text":" (idempotent — skip any part already present):","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"lower-alpha"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Overview 末尾加 1 句: ","type":"text"},{"text":"Dependency","type":"text","marks":[{"type":"strong"}]},{"text":": Quality telemetry is collected automatically via skill-quality-cli (installed by scripts/ensure_cli.sh if absent).","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Prerequisites 追加: - ","type":"text"},{"text":"skill-quality-cli","type":"text","marks":[{"type":"strong"}]},{"text":" — ensured by bash scripts/ensure_cli.sh (idempotent, skips if present)，另加 2 行 - Upgrade: run skill-quality-cli upgrade manually (no auto-upgrade) 与 - Disable telemetry report: set SKILL_QUALITY_REPORT=0","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"在核心流程第一个 ```bash 代码块内前置强制指令（用生成 skill 自己的 name 替换 \u003cname>）: > ","type":"text"},{"text":"⚠️ Mandatory: every hcloud command in this skill MUST be wrapped with skill-quality-cli run --skill-name \u003cname> -- ** — bare hcloud calls are strictly forbidden.","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"将 SKILL.md 所有 ```bash 代码块内的裸 hcloud \u003cService> \u003cOperation> ... 命令包裹为 skill-quality-cli run --skill-name \u003cname> -- hcloud ...（已包裹的跳过；\u003cplaceholder> 模板行不包）","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"references","type":"text","marks":[{"type":"strong"}]},{"text":": 在生成的 references/cli-installation-guide.md 中合并 skill-quality-cli 章节（ensure_cli.sh 幂等就绪 / install_cli.sh 手动安装 / 手动 upgrade / SKILL_QUALITY_REPORT=0 关闭）— 不得删除既有 KooCLI 安装与认证内容。","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Execution name","type":"text","marks":[{"type":"strong"}]},{"text":": 所有嵌入用生成 skill 自身的 frontmatter name，禁止用本 creator 的 name。","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Re-validate","type":"text","marks":[{"type":"strong"}]},{"text":": 注入后重跑 bash scripts/validate-skill.sh -s {skill-path}，确认 SKILL.md ≤ 500 行、文件 ≤ 30。","type":"text"}]}]}]}]}]},{"type":"paragraph","content":[{"text":"🛑 Strictly prohibited from generating hallucinated URIs / fabricated API paths. Feature points not verified in Phase 2 must not have specific commands written.","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"Output:","type":"text","marks":[{"type":"strong"}]},{"text":" phase-3-summary.json — List of generated files and structure validation results","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 4: Test Preparation","type":"text"}]},{"type":"paragraph","content":[{"text":"Dependency:","type":"text","marks":[{"type":"strong"}]},{"text":" Phase 3 document generation completed (phase-3-summary.json exists)","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Generate test cases","type":"text","marks":[{"type":"strong"}]},{"text":" — Split test cases based on Phase 2/3 feature points","type":"text"}]}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"CLI cases","type":"text","marks":[{"type":"strong"}]},{"text":" — one case per hcloud command; e.g., ","type":"text"},{"text":"hcloud ECS ListServersDetails --cli-region=cn-north-4 --limit=1","type":"text","marks":[{"type":"code_inline"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"SDK cases","type":"text","marks":[{"type":"strong"}]},{"text":" — one case per SDK call; e.g., list_sub_customer_coupons(limit=1) — note: BSS SDK only supports cn-north-1 and similar regions, use --cli-region=cn-north-1 (or HUAWEI_REGION=cn-north-1) for BSS samples","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"API cases","type":"text","marks":[{"type":"strong"}]},{"text":" — one case per user-provided endpoint; e.g., curl -X GET {endpoint}","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Own-script smoke cases","type":"text","marks":[{"type":"strong"}]},{"text":" — 每个自带脚本至少 1 条正例：有 --help/-h 的脚本用 --help 冒烟；否则用 bash -n \u003c脚本绝对路径> 语法检查。脚本路径必须解析为绝对路径（如 bash $PWD/scripts/ensure_cli.sh --help），避免相对路径在执行时失效。示例：bash $PWD/scripts/ensure_cli.sh --help / bash -n $PWD/scripts/validate-skill.sh","type":"text"}]}]}]}]}]},{"type":"ordered_list","attrs":{"order":2,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Save test cases as JSON","type":"text","marks":[{"type":"strong"}]},{"text":" → templates/test-vars.json:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"json"},"content":[{"text":"{\"test_cases\": [{\"id\": \"TC-01\", \"name\": \"...\", \"command\": \"...\", \"expected\": \"...\"}]}","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Show all test cases to the user for confirmation","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Run tests:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Read AK/SK from environment variables: 自动扫描所有以 HUAWEI / HW / HWC 开头的环境变量，匹配其中含 ACCESS_KEY / _AK / SECRET_KEY / _SK 的键值对","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"If no valid AK/SK env or CLI profile: re-run the Pre-check template and STOP — never ask AK/SK in chat; if user won't provide env vars, terminate.","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Execute test cases one by one","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Before executing mutating commands (Create/Update/Delete), must prompt the user and wait for confirmation","type":"text","marks":[{"type":"strong"}]}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Test verification flow:","type":"text","marks":[{"type":"strong"}]}]},{"type":"code_block","attrs":{"wrap":false,"language":""},"content":[{"text":"Each case → Try CLI execution\n ├── ✅ Success → Record PASS\n └── ❌ Failure → Check syntax issues\n ├── ✅ Syntax issue → Fix and retry\n └── ❌ Non-syntax issue → Fallback to SDK\n ├── ✅ Success → Record PASS (SDK)\n └── ❌ Failure → Fallback to API (user-provided endpoint)\n ├── ✅ Success → Record PASS (API)\n └── ❌ Failure → Record FAIL ⛔ requires manual verification","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Output:","type":"text","marks":[{"type":"strong"}]},{"text":" phase-4-summary.json — Test case list + per-case execution results","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 5: Detailed Testing","type":"text"}]},{"type":"paragraph","content":[{"text":"Dependency:","type":"text","marks":[{"type":"strong"}]},{"text":" Phase 4 test preparation completed (phase-4-summary.json exists)","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Full regression:","type":"text","marks":[{"type":"strong"}]},{"text":" Execute all test cases generated in Phase 4 — ","type":"text"},{"text":"所有 CLI 回归用例必须真实执行","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Resource lifecycle testing","type":"text","marks":[{"type":"strong"}]},{"text":" (Skills involving resource creation/modification/deletion):","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Create resource → verify creation succeeded (query to confirm) → runtime query → destroy resource → verify release","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Test report outputs information on created/modified/deleted resources","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Prompt the user and wait for confirmation before each step","type":"text","marks":[{"type":"strong"}]}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Management-type Skills","type":"text","marks":[{"type":"strong"}]},{"text":": CRUD → end-to-end full testing; query-only → output query results to test report","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Report generation:","type":"text","marks":[{"type":"strong"}]},{"text":" Test results aggregated by case; detailed resource-change records; detailed error info for failed cases","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Output:","type":"text","marks":[{"type":"strong"}]},{"text":" phase-5-summary.json — Detailed test results + resource operation records","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 6: Resource Cleanup and Compliance Check","type":"text"}]},{"type":"paragraph","content":[{"text":"Dependency:","type":"text","marks":[{"type":"strong"}]},{"text":" Phase 5 detailed testing completed (phase-5-summary.json exists)","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Resource Cleanup:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Check whether all resources created in Phase 5 have been released","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Unreleased resources → Prompt user and attempt cleanup","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Record cleanup results","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Huawei Cloud Skill Specification Compliance Check","type":"text","marks":[{"type":"strong"}]},{"text":" (against 华为云Skill检查规范):","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"SKILL.md exists (Critical) — file existence check","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Skill directory under skills/ (Low) — path format: skills/{category}/{subcategory}/{skill-name}/","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Skill package naming convention (High) — directory name matches huawei-cloud-{product}-{function}","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"One PR submits only one Skill (Critical) — git diff checks that PR changes only affect a single Skill directory","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"YAML Frontmatter exists (Critical) — grep for the --- delimiter","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"name field exists (Critical) — frontmatter name field exists and matches directory name","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"description field exists (Critical) — frontmatter description field exists and contains feature summary + trigger words","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"description includes trigger words (Medium) — accept Triggers include:, Use when, or equivalent trigger conditions","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Should not contain version field (Low) — no version field in frontmatter","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Overview section (High) — match Overview or 概述","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Prerequisites section (High) — match Prerequisites or 前置条件","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Workflow section (High) — match Workflow or 工作流","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Core Commands section (High) — match Core Commands or 核心命令","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Parameter Confirmation section (High) — match Parameter Confirmation or 参数确认","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Reference Documents section (Critical) — match Reference Documents, References, or 参考文档","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"KooCLI Command Format Standard section (Low) — required when CLI is involved; match the English or Chinese heading","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"references/cli-installation-guide.md (Medium) — recommended when CLI is involved, file existence (optional)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Quality-CLI integration (High) — scripts/ensure_cli.sh + scripts/install_cli.sh exist; SKILL.md contains the skill-quality-cli run Mandatory mandate and wrapped hcloud commands","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"references/iam-policies.md (Medium) — recommended, file existence (optional)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"references/verification-method.md (Medium) — recommended file existence","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"references/acceptance-criteria.md (Low) — recommended file existence","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Reference document kebab-case naming (Low) — file names under references/ are all lowercase kebab-case","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Credential hardcoding (Critical) — grep for credential hardcoding patterns and CLI credential config","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Cross-Skill direct calls (Critical) — grep other Skill names","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"CLI write operations require confirmation (Low) — check whether user confirmation is prompted","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Service name requirement (Medium) — every concrete hcloud service matches a KooCLI Service name and starts with uppercase/title case, such as ECS, CloudPond, or IAMAccessAnalyzer","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Operation name PascalCase (Medium) — every concrete operation name uses PascalCase","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Includes --cli-region (Medium) — every concrete CLI command includes the region parameter","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Total skill size ≤ 40 MB (Medium) — sum all file content sizes under the Skill directory","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Total file count ≤ 30 (Medium) — count SKILL.md and every file in all subdirectories","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"SKILL.md line count ≤ 500 (Medium) — split excess content into references/","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"File extensions in allowlist (Medium) — reject extensionless files and extensions outside the 46-type allowlist","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Final report:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Merge Phase 1-6 phase summaries","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Output complete creation report","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Mark all incomplete items","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Final six-phase completeness check:","type":"text","marks":[{"type":"strong"}]}]},{"type":"code_block","attrs":{"wrap":false,"language":""},"content":[{"text":"Check phase-1-summary.json exists → If missing, restart from Phase 1\nCheck phase-2-summary.json exists → If missing, restart from Phase 2\nCheck phase-3-summary.json exists → If missing, restart from Phase 3\nCheck phase-4-summary.json exists → If missing, restart from Phase 4\nCheck phase-5-summary.json exists → If missing, restart from Phase 5\nCheck phase-6-summary.json exists → If missing, restart from Phase 6","type":"text"}]},{"type":"paragraph","content":[{"text":"All phases complete → Creation done. Missing phases → Restart from the missing phase.","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Clean up phase summary files:","type":"text","marks":[{"type":"strong"}]},{"text":" After the completeness check passes, delete all phase-","type":"text"},{"text":"-summary.json files under the skill directory. ","type":"text","marks":[{"type":"em"}]},{"text":"Only","type":"text","marks":[{"type":"strong"},{"type":"em"}]},{"text":" run the deletion after the completeness check fully passes and the \u003cskill-path> has been verified (it must be a legitimate directory of the skill under test). Do ","type":"text","marks":[{"type":"em"}]},{"text":"not","type":"text","marks":[{"type":"strong"},{"type":"em"}]},{"text":" chain the deletion onto other checks; use a guarded, quoted single command for phase-","type":"text","marks":[{"type":"em"}]},{"text":"-summary.json only.","type":"text"}]},{"type":"paragraph","content":[{"text":"Note:","type":"text","marks":[{"type":"strong"}]},{"text":" Only perform cleanup after the completeness check ","type":"text"},{"text":"fully passes","type":"text","marks":[{"type":"strong"}]},{"text":". If there are missing phases, do not clean up; restart from the missing phase.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Output:","type":"text","marks":[{"type":"strong"}]},{"text":" phase-6-summary.json — Final creation report + compliance check results","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"KooCLI Command Format Standard","type":"text"}]},{"type":"paragraph","content":[{"text":"hcloud \u003cService> \u003cOperation> --cli-region=\u003cregion> [--key=value ...] — 底层语法格式。","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Service name","type":"text","marks":[{"type":"strong"}]},{"text":" — exact KooCLI Service name beginning with uppercase/title case, e.g. ECS, VPC, CloudPond, IAMAccessAnalyzer","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Operation name","type":"text","marks":[{"type":"strong"}]},{"text":" — PascalCase, e.g. ListServers, ShowServer","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Region parameter","type":"text","marks":[{"type":"strong"}]},{"text":" — --cli-region=\u003cvalue>, e.g. --cli-region=cn-north-4","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Simple parameter","type":"text","marks":[{"type":"strong"}]},{"text":" — --key=value, e.g. --server_id=xxx","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Indexed parameter","type":"text","marks":[{"type":"strong"}]},{"text":" — --key.1=value1, e.g. --servers.1.id=xxx","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Core Commands","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"真实命令区（Real Command Area — 可直接执行验证）","type":"text"}]},{"type":"paragraph","content":[{"text":"以下为真实可执行的只读命令，用于 Pre-check 与 Phase 2/4/5 真实验证（","type":"text"},{"text":"{path}","type":"text","marks":[{"type":"code_inline"}]},{"text":" 等为占位符，实际执行时替换为真实路径，见 Parameter Confirmation）：","type":"text"}]},{"type":"table","attrs":{"layout":null},"content":[{"type":"tr","content":[{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Command","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Purpose","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"hcloud ECS ListFlavors --cli-region=cn-north-4 --limit=1","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Phase 2/5: 查询 ECS 规格（只读，真实可执行）","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"hcloud ECS ListServersDetails --cli-region=cn-north-4 --limit=1","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Phase 4/5: 查询 ECS 列表（只读，真实可执行）","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"hcloud configure list","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Pre-check: 校验 CLI 凭据配置（只读，真实可执行）","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"python3 -c \"import huaweicloudsdkcore\"","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"前置检查: SDK 可用性（真实可执行）","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"命令说明区（Command Description Area — 格式说明，非直接执行）","type":"text"}]},{"type":"paragraph","content":[{"text":"以下行仅作格式说明，","type":"text"},{"text":"命令行提取器只提取以 bash / hcloud / python3 / curl 开头的真实命令；以 # 开头的行是说明，会被跳过","type":"text","marks":[{"type":"strong"}]},{"text":"：","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"hcloud CLI 通用格式","type":"text","marks":[{"type":"strong"}]},{"text":"：hcloud \u003cService> \u003cOperation> --cli-region=\u003cregion> [--key=value ...]，详见 KooCLI Command Format Standard。","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"结构/规范校验（Phase 3/6）","type":"text","marks":[{"type":"strong"}]},{"text":"：执行 bash scripts/validate-skill.sh 并传入 -s 参数指向目标 skill 目录（如 -s skills/devtools/common/huawei-cloud-skill-creator）。","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"功能测试（Phase 4/5）","type":"text","marks":[{"type":"strong"}]},{"text":"：执行 bash scripts/test-cli-commands.sh，传入 -s 参数指向 skill 目录、-e 参数选择执行模式（cli/sdk/api/auto）。","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"质量 CLI 就绪","type":"text","marks":[{"type":"strong"}]},{"text":"：执行 bash scripts/ensure_cli.sh（幂等；缺失时自动安装 skill-quality-cli），手动安装用 bash scripts/install_cli.sh。","type":"text"}]}]}]},{"type":"blockquote","content":[{"type":"paragraph","content":[{"text":"test-cli-commands.sh 仅执行白名单命令（hcloud/python3/curl/bash 开头），其他命令被拒绝且不会执行。validate-skill.sh 对不存在的 skill 目录会明确报错（exit 1）。","type":"text"}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Parameter Confirmation","type":"text"}]},{"type":"table","attrs":{"layout":null},"content":[{"type":"tr","content":[{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Parameter","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Required","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Example","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"skill-path","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Yes","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Target Skill directory path","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"e.g., huawei-cloud-ecs-manage","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"region","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Huawei Cloud region (BSS only supports cn-north-1 and similar regions)","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"cn-north-4 (BSS: cn-north-1)","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"executor","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"No","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Execution mode (cli/sdk/api)","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"cli","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Edge Cases","type":"text"}]},{"type":"table","attrs":{"layout":null},"content":[{"type":"tr","content":[{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Scenario","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Handling","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"User skips questions and says \"start\" directly","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Remind: requirements analysis must be completed first, start from Phase 1 questions","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"AK/SK environment variables not set","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Re-run the ","type":"text"},{"text":"Pre-check","type":"text","marks":[{"type":"strong"}]},{"text":" above. Output the env-var setup template (export HUAWEI_ACCESS_KEY=... / export HUAWEI_SECRET_KEY=...) and let the user fill it out-of-band. ","type":"text"},{"text":"NEVER","type":"text","marks":[{"type":"strong"}]},{"text":" ask the user to paste AK/SK into chat. If user does not configure, terminate process, strictly prohibited from skipping","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Target service not supported by hcloud CLI","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Phase 2 fallback to SDK → Read SDK source _http_info → If still not found, mark ⛔","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"SDK package does not exist","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Check package name variants, if still not found, inform user, do not infer API","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"User is unsure of API endpoint","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Mark ⛔ requires manual verification, do not fabricate endpoints. If SDK has the method, read _http_info for the real path","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"SDK has method but _http_info has no resource_path","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Mark ⛔, this API does not exist in the SDK, do not infer","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Attempting to infer API via path pattern (e.g., inferring claim-vouchers from coupons)","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"❌ Strictly prohibited. It doesn't exist","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Resource creation test fails","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Analyze error cause (permissions/quota/parameters) → Fix and retry","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Resource release fails","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Retry 3 times, if still failing, inform user to clean up manually","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"templates/test-vars.json missing when running tests","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"test-cli-commands.sh reports FATAL and exits 1 (no tests executed). Re-run Phase 4 to generate templates/test-vars.json before testing","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"User refuses resource lifecycle testing","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Inform user: resource lifecycle testing is a required step and cannot be skipped; if user still refuses, terminate process","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Phase 6 finds missing phases","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Restart from the missing phase until all 6 phases are complete","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"SDK has method but actual API path unknown","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Read SDK source grep _http_info {service}_client.py to get real path","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"BSS service SDK initialization fails (GlobalCredentials)","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"BSS is global and must use GlobalCredentials with with_endpoints, not BasicCredentials with with_region; ","type":"text"},{"text":"BSS 仅支持 cn-north-1 等区域（--cli-region=cn-north-1 / HUAWEI_REGION=cn-north-1）","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"list_sub_customer_coupons query returns 400","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"BSS limit parameter maximum is 100, not the default 200; use region cn-north-1 for BSS SDK samples","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Verification Method","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Specification Compliance Verification","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"bash scripts/validate-skill.sh -s {skill-path} # Check against 华为云Skill检查规范","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Functional Testing","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"bash scripts/test-cli-commands.sh -s {skill-path} -e {cli|sdk|api} # CLI priority → SDK fallback → API fallback","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Reference Documents","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"references/iam-policies.md — Least-privilege IAM policies","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"references/verification-method.md — Verification method details","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"references/dataflow-diagram.md — Mermaid data flow diagram","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"references/acceptance-criteria.md — Acceptance criteria","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"references/related-commands.md — Command quick reference","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Notes & Design Principles","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Six-phase strict pipeline","type":"text","marks":[{"type":"strong"}]},{"text":" — phases are chain-dependent, sequential, and cannot be skipped","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Phase 2/3 Fact-based","type":"text","marks":[{"type":"strong"}]},{"text":" — endpoints only from SDK _http_info/API Explorer (no inference); commands per Phase 2 conclusions; no endpoint → mark ⛔","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Phase 4-6 Verify","type":"text","marks":[{"type":"strong"}]},{"text":" — every command really executed (mutating ops need confirmation); Phase 6: cleanup + compliance + completeness; fix failures, re-verify","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Credential Security","type":"text","marks":[{"type":"strong"}]},{"text":" — no hardcoded AK/SK; read from env vars (HUAWEI_","type":"text"},{"text":"/HW_","type":"text","marks":[{"type":"em"}]},{"text":"/HWC_* AK/SK markers) or active CLI profile; never hcloud configure set with literal secrets","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Credentials Mandatory","type":"text","marks":[{"type":"strong"}]},{"text":" — if AK/SK missing after the Pre-check, output the env-var setup template for out-of-band fill; never ask the user to paste AK/SK into chat; if still unconfigured, terminate","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"BSS SDK","type":"text","marks":[{"type":"strong"}]},{"text":" must use GlobalCredentials + with_endpoints, not BasicCredentials with with_region.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"BSS 区域","type":"text","marks":[{"type":"strong"}]},{"text":"：BSS 服务仅支持 cn-north-1 等区域；涉及 BSS 的示例命令应标注 --cli-region=cn-north-1（SDK 初始化也用 cn-north-1），test-defaults.json 中 region: cn-north-1 即为此口径。","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Cleanup","type":"text","marks":[{"type":"strong"}]},{"text":" — resources created during lifecycle testing must be released in Phase 6","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Least privilege","type":"text","marks":[{"type":"strong"}]},{"text":" — iam-policies.md provides least-privilege policy JSON; the skillPath in skills-lock.json is skills/devtools/common/huawei-cloud-skill-creator/SKILL.md","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"IAM authoring (official only)","type":"text","marks":[{"type":"strong"}]},{"text":" — IAM action names MUST be verified via GetAuthorizationSchemaV5 / docs / ListPoliciesV5; never inferred; Version 5.0 for IAM 5.0, 1.1 only for legacy v3","type":"text"}]}]}]}]},"metadata":{"date":"2026-11-02","name":"huawei-cloud-skill-creator","tags":["huawei-cloud","skill-creator","cli","sdk","devops"],"author":"@skillopedia","source":{"stars":59,"repo_name":"huaweicloud-skills","origin_url":"https://github.com/huaweicloud/huaweicloud-skills/blob/HEAD/skills/devtools/common/huawei-cloud-skill-creator/SKILL.md","repo_owner":"huaweicloud","body_sha256":"218551258077d3992f70b2d8ac9d9c0545519bd1cac0d5f0771f0b1726190500","cluster_key":"aa27b4ff131142e4d37769a6cd4988fab986743e3d19b07d2d09ed55d8b78ba0","clean_bundle":{"format":"clean-skill-bundle-v1","source":"huaweicloud/huaweicloud-skills/skills/devtools/common/huawei-cloud-skill-creator/SKILL.md","text_bytes":67656,"source_commit":"bad25df61c331db250f0cc79f1fa7acee08b3fc8","skills_sh_rank":18007,"attachment_count":13,"text_attachments":13,"attachment_storage":"skill_attachments","binary_attachments":0},"cluster_size":1,"skill_md_path":"skills/devtools/common/huawei-cloud-skill-creator/SKILL.md","import_metadata":{"date":"2026-11-02","author":"@skillopedia","version":"v1","category":"general","category_label":"General"},"exact_dupes_collapsed_into_this":0},"version":"v1","category":"general","import_tag":"skills-sh-top20k-2026-11","description":"1. Six-phase pipeline for creating Huawei Cloud skills — Socratic requirements gathering, CLI→SDK→API research, MD generation, test preparation, detailed testing, and final cleanup & compliance check\n2. Phase-chained dependency: each phase builds on the previous phase's output, no phase may be skipped\n3. Supports CLI, SDK, and REST API execution modes with automatic fallback detection\n4. Generates complete skill directory structure with SKILL.md, references/, scripts/, templates/\n5. Validates against the Huawei Cloud Skill Specification (华为云Skill检查规范)\nTriggers include: \"创建华为云Skill\",\"新建华为云Skill\",\"华为云skill创建器\",\"创建 Skill\",\"新建 Skill\",\"skill 创建器\",\"create skill\",\"build skill\",\"new skill\",\"skill creator\",\"scaffold a Huawei Cloud skill\",\"wrap CLI or OpenAPI into a skill\",\"package cloud operations into a skill\",\"帮我创建华为云Skill\",\"帮我新建一个Skill\",\"封装华为云CLI为Skill\",\"华为云Skill脚手架\",\"帮我创建一个skill\",\"我需要一个skill\",\"建一个skill\",\"生成skill\",\"帮我建一个华为云skill\".\n"}},"renderedAt":1793676464832}

Important: agents should read /llm.txt, /llms.txt, or /.well-known/skills.json to discover the public Skillopedia API.