Skills/ClawHub/huawei-cloud-sfs-export-markdown

huawei-cloud-sfs-export-markdown@1.0.10

VERIFIED

Publisher claims: "1. Query the Huawei Cloud SFS (Scalable File Service / SFS Turbo) file-system list of a tenant region through KooCLI (`hcloud SFSTurbo ListShares`, the official read-only GET /v1/{project_id}/sfs-turbo/shares/detail), with an automatic fallback to the official huaweicloudsdksfsturbo v1 SDK (`SFSTurboClient.list_shares`) when hcloud is not installed. 2. Export the file-system name list (plus ID / status / protocol / capacity / availability zone / type / enterprise project / created time) into a well-formed local Markdown table file — strictly local file generation, nothing is ever written back to the cloud. `--output` sets the file path (default `sfs_share_list.md` in the current directory); the parent directory is created automatically and the file is written via a temp file + atomic rename. 3. Region aware: `--region` (default cn-north-4). Optional client-side filters — `--name` / `--id` / `--az` (case-insensitive substring) and `--status` / `--share-proto` (case-insensitive exact) — the real ListShares API has no such parameters, so the full paged list is fetched first and filtered locally. The applied filters are echoed in the document's metadata line (`过滤条件: ...`; `无过滤条件` when none). 4. Explicit error classification: empty file-system list (still writes the file — `当前区域(x)无 SFS 文件系统` when the region truly has none, `当前过滤条件下无匹配的 SFS 文件系统` when a filter matched nothing), missing AK/SK credentials (「缺少 AK/SK 凭证」), 403 / insufficient IAM permission (「无权限访问 SFS,请检查 IAM 权限」), hcloud not installed (falls back to the SDK, else a clear hint), KooCLI usage errors, and generic API/network failures. 5. Built-in write-intent guard: any mutating intent (create / delete / expand / shrink / resize / mount / unmount / attach / detach / restore / reboot ...) or any operation other than the read-only ListShares is rejected before execution — this skill is strictly read-only. 6. Triggers include: "查询SFS并导出md", "导出SFS文件系统清单为md", "SFS 名称 Markdown", "SFS list markdown", "SFS inventory markdown", "华为云SFS导出 markdown", "export SFS file systems to markdown". 7. Offline unit tests (mocked hcloud subprocess) cover the guard, paging, filters, Markdown rendering, atomic file writing, error classification and SDK fallback." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher wlc-dev · joined 14 days agoInstalls 2Last detonated 2 h ago
$clawhub install huawei-cloud-sfs-export-markdown
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-05 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File permission modification commandscripts/ensure_cli.sh:93 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandscripts/ensure_cli.sh:96 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedscripts/ensure_env.py:55 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/list_sfs_export_markdown.py:305 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File permission modification commandscripts/install_cli.sh:83 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandscripts/install_cli.sh:80 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05

Cost to the agent

Instructions loaded
≈4,917 tok
1 file · 13 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.