Skills/ClawHub/huawei-cloud-bcs-manage

huawei-cloud-bcs-manage@1.0.0

VERIFIED· install only

Publisher claims: "Query and manage Huawei Cloud BCS (Blockchain Service, 区块链服务) from one entry point. Read-only: list blockchain instances with status/version/charging details, instance detail, organization/peer nodes, channels, union members and invitations, specifications, quotas, creation/deployment status, asynchronous operation records, alerts and monitoring metrics. Write: download certificates and Fabric SDK configuration, create/freeze/unfreeze user certificates, create/delete channels, add/remove peers and organizations, create/update/delete instances, and handle union member invitations. Uses the huaweicloudsdkbcs Python SDK (KooCLI only exposes BCS when its local metadata cache holds the BCS service template, so this skill does not depend on KooCLI). Read-only commands never prompt; every write prints an impact preview and requires --confirm, and asynchronous results are reported through ListOpRecord. Never queries or modifies chaincode lifecycle (no BCS OpenAPI; use the console). Use when the user wants to list/inspect BCS instances, channels, organizations, peers, members, quotas, alerts or metrics (inventory, daily inspection, troubleshooting, cost review), or to change BCS resources: create or delete an instance, manage channels/peers/organizations, issue or revoke certificates, download SDK config, or accept/reject union invitations. Triggers include: "BCS", "blockchain service", "区块链", "区块链服务", "BCS 实例", "blockchain instance", "BCS channel", "通道", "联盟成员", "BCS 配额", "BCS 告警", "BCS 监控", "BCS 监控指标", "list BCS", "query blockchain", "查看区块链实例", "查询区块链通道", "查询链码 SDK 配置", "how many blockchain instances", "创建区块链实例", "删除区块链实例", "BCS channel management", "创建通道", "删除通道", "添加节点", "移除组织", "下载证书", "下载SDK配置", "冻结证书", "联盟邀请", "BCS manage"." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher huaweicloudskill · publishing for 54 daysInstalls 0Last detonated 3d ago
$clawhub install huawei-cloud-bcs-manage
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 91/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
File permission modification commandscripts/install_cli.sh:30 · File permission modification command — agent changes file ownership/permissionschmod +x ~/.local/bin/skill-quality-cli ~/.local/bin/skill-quality-cli.bin 2>/dev/nullFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandscripts/ensure_cli.sh:40 · File permission modification command — agent changes file ownership/permissionschmod +x ~/.local/bin/skill-quality-cli ~/.local/bin/skill-quality-cli.bin 2>/dev/nullFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05

Cost to the agent

Instructions loaded
≈6,212 tok
1 file · 16 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.