Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/huaweicloud/huaweicloud-skillsnpx agentmods add skills/huaweicloud/huaweicloud-skills/huawei-cloud-cce-cluster-managementWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-cce-cluster-management)<a href="https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-cce-cluster-management"><img src="https://agentmods.dev/badge/skills/huaweicloud/huaweicloud-skills/huawei-cloud-cce-cluster-management/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-cce-cluster-management"><img src="https://agentmods.dev/badge/skills/huaweicloud/huaweicloud-skills/huawei-cloud-cce-cluster-management.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00256 | $0.05746 |
| Opus 5.5 | $0.00102 | $0.02298 |
| Sonnet 5.5 | $0.00051 | $0.01149 |
| Haiku 4.5 | $0.00026 | $0.00575 |
Grade D, and why
huawei-cloud-cce-cluster-management scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
sudo bash ../huawei-cloud-kubectl-cce-installer/scripts/install_kubectl_cce.sh --execute --bin-dir /usr/local/bin Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh How it starts
The opening of the file, as written. The whole thing — 417 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Huawei Cloud CCE Cluster Management
Overview
Manage CCE (Cloud Container Engine) cluster lifecycle, including cluster creation/deletion/hibernation/awakening, node pool management, node scheduling control, and addon management.
The skill executes Huawei Cloud API calls through hcloud (KooCLI) and Kubernetes node operations (cordon/uncordon/drain/status) through kubectl cce (the kubectl-cce plugin). The plugin connects to the CCE API Gateway using AK/SK credentials — no cluster EIP or manual kubeconfig required. Two operations (create cluster, create node pool) fall back to the Python SDK because of a known hcloud metadata parsing defect — see cce-api-guide.md.
Dependency: This skill requires kubectl and the kubectl-cce plugin. Install them via the huawei-cloud-kubectl-cce-installer skill.
⛔ Security Constraints
Dangerous Operation Confirmation Mechanism
This skill strictly enforces a two-step confirmation mechanism for all dangerous operations to prevent accidental service disruption or data loss.
All dangerous operations require confirm=true parameter to execute. Otherwise, they return a preview and confirmation prompt.
Operations Requiring Confirmation
| Tool | Operation Type | Risk Level | Description |
|---|---|---|---|
huawei_delete_cce_cluster |
Delete | 🔴 Critical | Deletes entire CCE cluster, irreversible |
huawei_hibernate_cce_cluster |
Hibernate | 🟠 High | Stops all workloads, pauses control plane billing |
huawei_awake_cce_cluster |
Awake | 🟠 High | Resumes cluster from hibernation |
huawei_resize_cce_nodepool |
Scale | 🟡 Medium | Adjusts node pool size, affects capacity |
huawei_delete_cce_nodepool |
Delete | 🟠 High | Deletes node pool, affects business capacity |
huawei_delete_cce_node |
Delete | 🟠 High | Removes node from cluster, affects scheduling |
huawei_uninstall_cce_addon |
Uninstall | 🟠 High | Removes addon, may affect cluster functionality |
huawei_cce_node_cordon |
Cordon | 🟡 Medium | Marks node unschedulable, new pods won't be assigned |
huawei_cce_node_uncordon |
Uncordon | 🟡 Medium | Marks node schedulable, new pods may be assigned immediately |
huawei_cce_node_drain |
Drain | 🟠 High | Cordons + evicts all pods from node, affects running workloads |
What ships with it
16 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/acceptance-criteria.md 7.4 KB
- references/cce-api-guide.md 11 KB
- references/cce-cluster-parameters.md 10 KB
- references/cli-installation-guide.md 587 B
- references/iam-policies.md 1.8 KB
- references/task-cluster-management.md 3.0 KB
- references/task-node-management.md 6.0 KB
- references/task-nodepool-management.md 5.3 KB
- references/troubleshooting.md 11 KB
- references/verification-method.md 3.9 KB
- scripts/huawei_cloud/__init__.py 36 B runs code
- scripts/huawei_cloud/common.py 16 KB runs code
- scripts/huawei_cloud/dispatcher.py 7.6 KB runs code
- scripts/huawei_cloud/hcloud_runner.py 12 KB runs code
- scripts/huawei_cloud/special_ops.py 30 KB runs code
- scripts/huawei-cloud.py 1.4 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 417 lines · 256 tokens per session scan D 256b6966df5a
huawei-cloud-cce-cluster-management is a skill published in the GitHub repository huaweicloud/huaweicloud-skills (59 stars, last pushed yesterday), licensed MIT. It adds 256 tokens to every session and 5,746 once invoked, about $0.0010 per session on Opus 5.5. A static security scan graded it D with 3 findings (asks for root, downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
mirrord-kafka
Helps DevOps engineers configure mirrord Operator's Kafka queue splitting feature end-to-end. Generates the MirrordSplitConfig and MirrordPropertyList Kubernetes CRD YAMLs (the current resources; MirrordKafkaTopicsConsumer + MirrordKafkaClientConfig are deprecated but still supported), the matching mirrord.json…
mirrord-propagation-discovery
Scans a live Kubernetes environment with mirrord dump to find an identifier mirrord can filter traffic on: a header, a baggage or tracestate member, a tenant or user id, a trace id (W3C, B3, X-Ray, Google, Jaeger), a JWT claim, a cookie, a path segment, or a JSON body field that is present on every hop of a request…
timoni
Use when deploying applications to Kubernetes with Timoni. Covers installing and upgrading module instances from OCI registries, composing multi-app deployments with bundles, injecting values from clusters or CI with runtimes, targeting multiple clusters, and authoring, testing, signing and publishing modules with CUE.
k8s-capi
Cluster API lifecycle management for provisioning, scaling, and upgrading Kubernetes clusters. Use when managing cluster infrastructure or multi-cluster operations.
k8s-deploy
Deploy and manage Kubernetes workloads with progressive delivery. Use for deployments, rollouts, blue-green, canary releases, scaling, and release management.
k8s-autoscaling
Configure Kubernetes autoscaling with HPA, VPA, and KEDA. Use for horizontal/vertical pod autoscaling, event-driven scaling, and capacity management.