Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add huaweicloud/huaweicloud-skills --skill huawei-cloud-activity-submitgit clone --depth 1 https://github.com/huaweicloud/huaweicloud-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-activity-submit)<a href="https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-activity-submit"><img src="https://agentmods.dev/badge/skills/huaweicloud/huaweicloud-skills/huawei-cloud-activity-submit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-activity-submit"><img src="https://agentmods.dev/badge/skills/huaweicloud/huaweicloud-skills/huawei-cloud-activity-submit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00304 | $0.04649 |
| Opus 5.5 | $0.00122 | $0.01860 |
| Sonnet 5.5 | $0.00061 | $0.00930 |
| Haiku 4.5 | $0.00030 | $0.00465 |
Grade A, and why
huawei-cloud-activity-submit scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
1. **收集链接**：沙箱步骤用公开沙箱域名（`https://xxx.devbridge-s2.hwtunnel.com`，部署后先 `curl -sI <URL>` 验证 200）；ECS 步骤用 ECS 公网 HTML 地址（`http://<EIP>/`）。 How it starts
The opening of the file, as written. The whole thing — 204 lines — stays where its author put it; the contents beside it link to each section on GitHub.
华为云开放能力闯关 · 作品提交 Skill（生产环境）
让 Agent 直接调用活动 Agent 提交接口（AK/SK 鉴权）完成成果提交（不做任何页面/浏览器操作），提交成功后向用户提示预计可得的对应步骤积分。
Overview
本 Skill 让 Agent 直接调用华为云"开放能力闯关挑战"（activity_code = open-capability-2026-1024）的 Agent 提交接口（AK/SK 鉴权），将活动生成的作品链接自动提交到对应步骤，并在成功后回报预计可得的积分。
核心特点：
- 纯 API 调用：不涉及任何页面/浏览器操作，直接 POST 提交接口。
- 固定生产环境：本 skill 固定使用生产环境接口，不切换环境。
- 两步独立提交：
beginner（沙箱部署，100 分）与intermediate（ECS 持久化部署，400 分），两步相互独立、无强制先后。 - AK/SK 鉴权：通过请求头
X-HW-AK/X-HW-SK/X-HW-Security-Token认证，不依赖 hcloud CLI。 - 附加请求头（两步均需）：
beginner与intermediate提交时均携带X-HW-PROJECT-ID/X-HW-REGION。 - 纯 Node.js 脚本：
submit.mjs（Node ≥ 18，无外部依赖），不使用 KooCLI。 - 可选展览馆发布：沙箱部署后始终询问；若未发布则 ECS 后再问一次；已发布则不再询问。
- 资源清理提醒：ECS 提交成功后提醒用户清理按量付费资源。
何时使用
- 用户说“把作品/成果/沙箱链接提交到活动” “帮我提交闯关成果” “提交沙箱域名/公网地址” 等。
- 活动已生成沙箱作品链接（前端站点）和/或 ECS 公网地址，需要提交到对应步骤。
- 仅针对活动
activity_code = open-capability-2026-1024。
提交接口
| 项 | 值 |
|---|---|
| 基地址（生产，固定） | https://open-dataset.huaweicloud.com/api/v1/hdopenservice/agent |
| 提交 | POST {base}/submit-activity-work |
前端页面走
/user/...（SSO 登录会话）；Agent 走/agent/...（AK/SK 请求头），两者请求体与响应一致。本 skill 固定使用生产环境基地址，不切换环境。
鉴权（AK/SK 请求头）：
X-HW-AK（必填）：华为云 Access KeyX-HW-SK（必填）：华为云 Secret KeyX-HW-Security-Token（可选）：使用 STS 临时凭证时必填
附加请求头（两步均需）：
X-HW-PROJECT-ID：Project IDX-HW-REGION：region（如cn-north-4）
凭证优先级：命令行参数 > 环境变量（
HW_ACCESS_KEY/HW_SECRET_KEY/HW_SECURITY_TOKEN，兼容HUAWEICLOUD_SDK_AK/HUAWEICLOUD_SDK_SK/HUAWEICLOUD_SDK_SECURITY_TOKEN、HW_AK/HW_SK）。切勿把凭证写入仓库。
提交请求体（Content-Type: application/json，与 /user/submit-activity-work 一致）：
{
"activity_code": "open-capability-2026-1024",
"milestone": "beginner | intermediate",
"work_link": "https://xxx.devbridge-s2.hwtunnel.com",
"api_link": "http://<ECS_EIP>/hc-activity/index.html",
"summary": "作品说明（可选，≤500 字）"
}
按步骤取字段：
beginner（沙箱部署）：只传work_link（沙箱站点链接）intermediate（ECS 持久化部署）：只传api_link（ECS 公网访问地址，需含index.html，如http://<EIP>/hc-activity/index.html）
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed · +2 lines · +12 tokens per session 6d1811cf33bc
- 7d ago First seen · 202 lines · 292 tokens per session scan A a649125325b6
huawei-cloud-activity-submit is a skill published in the GitHub repository huaweicloud/huaweicloud-skills (59 stars, last pushed yesterday), licensed MIT. It adds 304 tokens to every session and 4,649 once invoked, about $0.0012 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-21.
Other skills, from other repositories
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…