Skills/ClawHub/huawei-cloud-as-group-list

huawei-cloud-as-group-list@1.0.0

VERIFIED

Publisher claims: "1. Read-only inventory of Huawei Cloud Auto Scaling (AS / 弹性伸缩) resources in one region: scaling group name / ID / status, desired vs current instance number, min-max instance number, associated VPC / subnet / ELB, and the instance members inside a scaling group. Aimed at troubleshooting "scale-out did not take effect", "instance counts do not match", and "scaling group stuck in an abnormal state". 2. Primary path: KooCLI call `AS ListScalingGroups` (read-only GET /autoscaling-api/v1/{project_id}/scaling_group) with `ListScalingInstances` (GET /autoscaling-api/v1/{project_id}/scaling_group_instance/ {scaling_group_id}/list) for drill-down; automatic fallback to the official huaweicloudsdkas v1 SDK when hcloud is unavailable. 3. Output modes: compact list (name / ID / status) by default, `--table` group view (11 columns) or, with `--group-id`, instance view (6 columns), and `--json` for the raw merged response. 4. Abnormal groups (desired != current or status != INSERVICE) and abnormal instances (life-cycle != INSERVICE or health != NORMAL) are placed in a separate highlighted section at the top of `--table` output; `--status abnormal` lists only abnormal resources. 5. Client-side filters: `--name` (exact, `--fuzzy` for substring), `--group-id`, `--status` (supports the abnormal alias), `--region` (default cn-north-4). `--limit` is 1-100 with automatic paging driven by total_number and the accumulated item count. 6. Built-in write-intent guard: create / update / delete / enable / disable / batch-add / batch-remove / policy-execute / ... are rejected before any cloud call with exit code 1 — this skill never writes to AS. 7. Explicit error hints for empty lists, 403 / insufficient IAM permission, missing credentials, missing hcloud, KooCLI [USE_ERROR], and a non-existent scaling group. 8. Triggers include: "list AS scaling groups", "AS 伸缩组列表", "查询伸缩组", "弹性伸缩组", "伸缩组实例", "期望实例数与当前实例数不一致", "扩容没生效", "auto scaling inventory", "scaling group troubleshooting", "华为云弹性伸缩"." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher wlc-dev · joined 14 days agoInstalls 0Last detonated 1 h ago
$clawhub install huawei-cloud-as-group-list
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-05 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File permission modification commandscripts/ensure_cli.sh:93 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandscripts/install_cli.sh:80 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedscripts/list_as_groups.py:293 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File permission modification commandscripts/install_cli.sh:83 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandscripts/ensure_cli.sh:96 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05

Cost to the agent

Instructions loaded
≈3,854 tok
1 file · 12 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.