Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add huaweicloud/huaweicloud-skills --skill huawei-cloud-cce-cluster-migratorgit clone --depth 1 https://github.com/huaweicloud/huaweicloud-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-cce-cluster-migrator)<a href="https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-cce-cluster-migrator"><img src="https://agentmods.dev/badge/skills/huaweicloud/huaweicloud-skills/huawei-cloud-cce-cluster-migrator/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-cce-cluster-migrator"><img src="https://agentmods.dev/badge/skills/huaweicloud/huaweicloud-skills/huawei-cloud-cce-cluster-migrator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00187 | $0.03454 |
| Opus 5.5 | $0.00075 | $0.01382 |
| Sonnet 5.5 | $0.00037 | $0.00691 |
| Haiku 4.5 | $0.00019 | $0.00345 |
Grade A, and why
huawei-cloud-cce-cluster-migrator scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 18d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
|**Phase 7: Ingress & Traffic Cutover**|Dedicated ELB, smoke test & DNS switch|Configure Ingress (Dedicated ELB + EIP; `ClusterIP` for Turbo, `NodePort` for Standard). Smoke test via `curl --resolve`. Switch DNS. Ref: `r How it starts
The opening of the file, as written. The whole thing — 168 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Huawei Cloud CCE Cluster Migrator
Overview
The Huawei Cloud CCE Cluster Migrator skill automates and orchestrates the end-to-end migration of Kubernetes workloads, cluster configurations, ConfigMaps, Secrets, and persistent storage from external or third-party cloud Kubernetes environments to Huawei Cloud Cloud Container Engine (CCE). It supports multi-type storage re-mapping (EVS, SFS Turbo, OBS), image synchronization to SWR, and traffic cutover with Dedicated ELB.
Prerequisites
- Tooling & CLIs:
- KooCLI (
hcloud) installed and authenticated on the central operator host. Seereferences/cli-installation-guide.md. kubectlconfigured with access to the source cluster and target CCE cluster.veleroCLI and/ork8cloneinstalled for workload metadata and volume migration.skopeoorimage-migratorinstalled for container image synchronization to SWR.
- KooCLI (
- IAM Authorization:
- The operator or agency credentials must have
CCEFullPolicy(orCCEMigrationOperatorCustomPolicy),SWRFullAccessPolicy,EVSFullAccessPolicy,VPCFullAccessPolicy, andELBFullAccessPolicy. Seereferences/iam-policies.md.
- The operator or agency credentials must have
- Network & Cluster Readiness:
- Target CCE cluster (prefer CCE Turbo) provisioned and healthy.
- VPC subnet routing, NAT Gateway SNAT rules (if public egress needed), and security group rules verified. See
references/pre-migration-checklist.md.
Workflow
| Phase | Core Objectives & Gates | Key Actions & References |
|---|---|---|
| Phase 1: Assessment & Sizing | Workload inventory, egress audit, and sizing | Audit workloads, external APIs, and storage. Reserve min 2 vCPU / 4 GiB for CCE add-ons. Size nodes by compute and CCE Turbo sub-interface capacity (1 Pod = 1 auxiliary ENI). Ref: references/pre-migration-checklist.md. |
| Phase 2: Plan Confirmation Gate | Formal written plan & customer sign-off | Consult referenced guides below and templates/migration-plan-template.md to materialize implementation_plan.md (specs, storage, NAT, DB consistency, ELB ingress, rollback). Must obtain explicit user approval before proceeding. |
| Phase 3: Target CCE Readiness | Cluster, network & security group verification | Verify CCE Turbo status, Everest CSI, sync central kubeconfig, open NodePort 30000-32767 (if Standard), and verify NAT SNAT rules. Ref: references/external-dependency-audit-guide.md. |
| Phase 4: Container Image Mirroring | Replicate images to Huawei Cloud SWR | Bulk mirror images + Velero suite (velero, aws-plugin, restore-helper) via skopeo with set -o pipefail and skopeo list-tags validation. Ref: references/swr-image-sync-guide.md. |
| Phase 5: Multi-Type PV Migration | Re-map & replicate storage | Classify volumes into EVS (min 10Gi, single-Pod exclusive RWO; StatefulSet for multi-replica, Recreate strategy for Deployment; csi-disk-topology for multi-AZ), SFS Turbo (pre-created instance; min 500Gi/1.2TB, multi-Pod RWX via static PV or dynamic subpath), or OBS. Apply Velero SC mapping ConfigMap. Enforce DB consistency hooks. Ref: references/storage-pv-migration-guide.md. |
| Phase 6: Workload & Secret Restore | Restore configs, secrets & workloads | Primary / Recommended: k8clone (zero-cluster-overhead metadata cloning with automated StorageClass/ImageRepo rewrite via restore.json) paired with direct database logical dump/restore (pg_dump/psql).Secondary / Alternative: Velero (full filesystem state with mandatory --uploader-type=restic, pre-provisioned 10Gi PVCs, and post-restore remediation). Exclude legacy service-account-token and paas.elb; preserve Headless Service clusterIP: None. Inject default-secret for SWR. Ref: references/k8clone-migration-guide.md, references/velero-migration-guide.md. |
| Phase 7: Ingress & Traffic Cutover | Dedicated ELB, smoke test & DNS switch | Configure Ingress (Dedicated ELB + EIP; ClusterIP for Turbo, NodePort for Standard). Smoke test via curl --resolve. Switch DNS. Ref: references/traffic-cutover-guide.md. |
What ships with it
28 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/acceptance-criteria.md 7.8 KB
- references/cli-installation-guide.md 6.4 KB
- references/configmap-secret-migration-guide.md 9.3 KB
- references/dataflow-diagram.md 3.1 KB
- references/external-dependency-audit-guide.md 8.8 KB
- references/iam-policies.md 5.7 KB
- references/k8clone-migration-guide.md 11 KB
- references/pre-migration-checklist.md 11 KB
- references/related-commands.md 4.2 KB
- references/storage-pv-migration-guide.md 15 KB
- references/swr-image-sync-guide.md 11 KB
- references/traffic-cutover-guide.md 7.3 KB
- references/troubleshooting-guide.md 21 KB
- references/velero-migration-guide.md 12 KB
- references/verification-method.md 14 KB
- scripts/remediate-restored-workloads.sh 3.9 KB runs code
- scripts/test-cli-commands.sh 6.9 KB runs code
- templates/image-migrator-auth.json 293 B
- templates/image-migrator-images.json 326 B
- templates/ingress-elb-eip-template.yaml 4.5 KB
- templates/k8clone-restore.json 499 B
- templates/migration-plan-template.md 4.3 KB
- templates/pvc-evs-template.yaml 583 B
- templates/pvc-obs-template.yaml 303 B
- templates/pvc-sfsturbo-subpath-template.yaml 1.2 KB
- templates/pvc-sfsturbo-template.yaml 1.5 KB
- templates/test-vars.json 2.5 KB
- templates/velero-sc-mapping.yaml 783 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 18d ago First seen · 168 lines · 187 tokens per session scan A ef1ca5423294
huawei-cloud-cce-cluster-migrator is a skill published in the GitHub repository huaweicloud/huaweicloud-skills (59 stars, last pushed yesterday), licensed MIT. It adds 187 tokens to every session and 3,454 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-10.
Other skills, from other repositories
mirrord-kafka
Helps DevOps engineers configure mirrord Operator's Kafka queue splitting feature end-to-end. Generates the MirrordSplitConfig and MirrordPropertyList Kubernetes CRD YAMLs (the current resources; MirrordKafkaTopicsConsumer + MirrordKafkaClientConfig are deprecated but still supported), the matching mirrord.json…
mirrord-propagation-discovery
Scans a live Kubernetes environment with mirrord dump to find an identifier mirrord can filter traffic on: a header, a baggage or tracestate member, a tenant or user id, a trace id (W3C, B3, X-Ray, Google, Jaeger), a JWT claim, a cookie, a path segment, or a JSON body field that is present on every hop of a request…
timoni
Use when deploying applications to Kubernetes with Timoni. Covers installing and upgrading module instances from OCI registries, composing multi-app deployments with bundles, injecting values from clusters or CI with runtimes, targeting multiple clusters, and authoring, testing, signing and publishing modules with CUE.
k8s-autoscaling
Configure Kubernetes autoscaling with HPA, VPA, and KEDA. Use for horizontal/vertical pod autoscaling, event-driven scaling, and capacity management.
k8s-capi
Cluster API lifecycle management for provisioning, scaling, and upgrading Kubernetes clusters. Use when managing cluster infrastructure or multi-cluster operations.
k8s-deploy
Deploy and manage Kubernetes workloads with progressive delivery. Use for deployments, rollouts, blue-green, canary releases, scaling, and release management.