Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add DongLiStudio/personal-agent-foundation --skill tencentcloud-profilegit clone --depth 1 https://github.com/DongLiStudio/personal-agent-foundationWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/donglistudio/personal-agent-foundation/tencentcloud-profile)<a href="https://agentmods.dev/skills/donglistudio/personal-agent-foundation/tencentcloud-profile"><img src="https://agentmods.dev/badge/skills/donglistudio/personal-agent-foundation/tencentcloud-profile/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/donglistudio/personal-agent-foundation/tencentcloud-profile"><img src="https://agentmods.dev/badge/skills/donglistudio/personal-agent-foundation/tencentcloud-profile.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00102 | $0.01317 |
| Opus 5.5 | $0.00041 | $0.00527 |
| Sonnet 5.5 | $0.00020 | $0.00263 |
| Haiku 4.5 | $0.00010 | $0.00132 |
Grade A, and why
tencentcloud-profile scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 46 lines — stays where its author put it; the contents beside it link to each section on GitHub.
腾讯云账号与 Profile 管理
本 Skill 只管理腾讯云身份、CLI 和跨项目路由。CVM、DNS、证书、云防火墙、COS、TCR 等业务操作仍由调用方项目按当前授权执行。
固定边界
- 先读取
{{AGENT_ROOT}}\GLOBAL\TENCENTCLOUD_PROFILES.md，再读取项目AGENTS.md的覆盖规则。身份选择优先级为：用户当前明确主体 → 项目规则 → GLOBAL 明确默认；没有唯一结果时不执行写操作。 - 官方执行层使用 Tencent Cloud CLI（TCCLI）：https://cloud.tencent.com/document/product/440 。所有 API 调用显式传入
--profile <name>和必要的--region，不得依赖default、TCCLI_PROFILE或残留的腾讯云环境变量推断业务身份。 - 优先使用
tccli auth login --profile <name>的浏览器授权、集团身份 SSO 或角色临时凭据；仅在确有必要时使用长期 SecretId/SecretKey，并使用最小权限子账号。 ~/.tccli/*.credential、临时 Token、SecretId、SecretKey、SSO 票据和授权码不得进入 GLOBAL、项目、Git、日志、命令参数或报告。只允许列出凭据文件名，不读取、复制或输出正文。TENCENTCLOUD_PROFILES.md只记录逻辑 Profile、主体/UIN、认证类型、用途、最小只读验证方式和状态；不得维护云资源清单或账号到服务器的静态绑定。- Profile 验证成功不授予云资源创建、变更、重启、网络开放、DNS 修改、证书签发、释放实例或删除数据的权限。
- 安装/升级 TCCLI、发起登录、删除 Profile、撤销授权或改变默认身份会影响本机状态；仅在用户当前指令已覆盖该动作时执行，否则先说明影响并取得授权。
工作流
- 执行
tccli --version；缺失时按官方方式安装，并记录实际版本。Windows 优先从干净的 PowerShell 子进程运行 Python/Pip，避免用户环境污染。 - 只列出
~/.tccli下的文件名，结合 GLOBAL 和项目规则解析目标逻辑 Profile；不得读取.credential内容。 - 新增普通腾讯云账号时，优先运行
tccli auth login --profile <name>；集团账号优先评估tccli sso login ... --profile <name>；运行在已授权 CVM 内部时可评估--use-cvm-role。 - 登录后执行
tccli sts GetCallerIdentity --profile <name>回读真实 UIN、主体和账号归属；具体资源在调用时通过目标服务的最小只读接口实时解析。例如 CVM 使用DescribeInstances，并把查询限定为项目或服务器详情提供的目标。 - 仅把经回读确认的账号身份事实写入
TENCENTCLOUD_PROFILES.md。不要缓存云资源列表或建立账号到服务器的反向绑定。服务器自身的稳定标识、SSH、主机指纹、服务目录和端口继续由SERVER_PROFILES.md与对应详情维护；项目资源只在确有长期路由需要时写入所属项目。 - 每次写操作前重新核验 Profile、调用主体、地域、目标资源 ID 和项目授权；请求完成后读取资源状态。批量或高影响操作必须有明确目标清单和恢复方案。
- 换机时重新安装 TCCLI 并重新授权，不复制
.credential。删除或重命名 Profile 前搜索 GLOBAL 与项目引用，确认替代路由；完成后验证其他 Profile 未受影响。
TCCLI 输出解析与异常校验
- TCCLI 的默认 JSON 输出直接是 API 响应主体，常见字段位于根级；不得未经检查假设存在
Response外层。编写解析逻辑前，先结合当前命令帮助和首次成功的原始响应确认实际字段路径。 - 解析计数、分页游标和资源数组前，必须验证必需字段确实存在；字段缺失应显式失败，不得把
$null强制转换为0后报告“没有资源”。 - 分页必须使用接口实际返回的总数和数组长度完成，并对去重后的数量做一致性检查。结果为零、与用户提供的控制台证据或已知资源矛盾时，先检查解析路径，并用同一服务的原始响应或独立只读接口交叉验证后再下结论。
- 域名清单的当前字段路径为：域名注册
TotalCount/DomainSet，DNSPodDomainCountInfo.AllTotal/DomainList；两类清单需要分别查询并按域名去重，不能把注册数量和 DNS 托管数量混为一谈。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 15d ago First seen · 46 lines · 102 tokens per session scan A 2ef79d9a0e27
tencentcloud-profile is a skill published in the GitHub repository DongLiStudio/personal-agent-foundation (16 stars, last pushed yesterday), licensed Apache-2.0. It adds 102 tokens to every session and 1,317 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-01.
Other skills, from other repositories
incident-response-skill
A skill that uses object-style tool references with purpose descriptions and required flags, plus strict validation.
hosting
Hostinger Hosting API for website management, order listing, datacenter selection, domain verification, free subdomains, databases, subdomains, parked domains, Node.js applications, and WordPress installs. Use when creating websites, listing hosting orders, choosing datacenters, verifying domain ownership, managing…
vps
Hostinger VPS API for virtual machine management, Docker projects, firewalls, SSH keys, backups, snapshots, OS templates, post-install scripts, recovery mode, malware scanning, PTR records, and metrics. Use when creating, managing, or troubleshooting VPS instances, deploying Docker containers, configuring firewalls…
dns
Hostinger DNS API for zone record management, snapshots, and validation. Use when creating, updating, or deleting DNS records, restoring DNS snapshots, validating zone changes, or resetting DNS to defaults.
gke-compute-classes
Configures, optimizes, and troubleshoots GKE ComputeClasses. Use when configuring Spot VMs with on-demand fallback, targeting specific accelerators (GPUs/TPUs) or machine families, restricting ComputeClass access, or debugging pending pods related to node pool auto-creation. Do not use for cluster-level Node Auto…
gke-reliability
Improves GKE workload reliability, using PDBs, health probes, and topology spread constraints. Use when configuring GKE workload reliability, setting up PDBs, or configuring GKE health probes (liveness, readiness, startup). Don't use for generating K8s YAML manifests (use gke-manifest-generation) or disaster recovery…