Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add huaweicloud/huaweicloud-skills --skill huawei-cloud-sms-host-migratorgit clone --depth 1 https://github.com/huaweicloud/huaweicloud-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-sms-host-migrator)<a href="https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-sms-host-migrator"><img src="https://agentmods.dev/badge/skills/huaweicloud/huaweicloud-skills/huawei-cloud-sms-host-migrator/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-sms-host-migrator"><img src="https://agentmods.dev/badge/skills/huaweicloud/huaweicloud-skills/huawei-cloud-sms-host-migrator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00169 | $0.06231 |
| Opus 5.5 | $0.00068 | $0.02492 |
| Sonnet 5.5 | $0.00034 | $0.01246 |
| Haiku 4.5 | $0.00017 | $0.00623 |
Grade B, and why
huawei-cloud-sms-host-migrator scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 29d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- If `state: "unavailable"`, the agent is disconnected; guide the user to restart the agent on the source host (`sudo ./startup.sh` on Linux or restart `SMS-Agent` Windows service). How it starts
The opening of the file, as written. The whole thing — 336 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Huawei Cloud SMS Host Migrator
The Huawei Cloud SMS Host Migrator skill automates and guides the full lifecycle of host migration from on-premise IDCs or third-party clouds (Alibaba Cloud, Tencent Cloud, AWS) to Huawei Cloud ECS or Flexus X instances using the Huawei Cloud Server Migration Service (SMS).
Overview
The migration process supports file-level replication (MIGRATE_FILE) for Linux source hosts and block-level replication (MIGRATE_BLOCK) for Windows Server source hosts.
Key capabilities provided:
- Guided Agent Deployment: Generate installation instructions for Linux and Windows Server source machines.
- Pre-migration Compatibility Diagnostics: Automatic checks for OS version, firmware (BIOS/UEFI), disk partition table (MBR/GPT), file system, and required network ports.
- Target Specification Modeling: Provision migration templates targeting Huawei Cloud standard ECS or cost-effective Flexus X instances.
- Replication Orchestration: Track replication tasks, remaining time (
remain_seconds), throttling limits, progress percentages, and subtask states. - Cutover and Validation: Execute incremental sync windows, detach migration drivers, and verify target host boot status.
Prerequisites
- KooCLI (
hcloud): Installed and authenticated with a valid profile (cn-north-4,ap-southeast-3, etc.).- Follow instructions in
references/cli-installation-guide.md.
- Follow instructions in
- Target Security Group Inbound Rules:
The destination ECS security group must allow specific inbound ports strictly from the source server IP:
- Linux: Inbound TCP port
22(secure rsync over SSH). - Windows Server: Inbound TCP ports
22(initialization),8899(control channel), and8900(block data streaming). - Default Creation Behavior: By default, create a dedicated new security group populated strictly with these rules rather than reusing an existing group.
- Target Outbound Rules: Outbound TCP port
443allowed to SMS API and Huawei Cloud services. - Target Subnet Network ACL: Ensure associated subnet ACLs allow matching inbound ports and return ephemeral ports.
- Security Guardrail: Do not set source address to
0.0.0.0/0; restrict strictly to source server IP.
- Linux: Inbound TCP port
- Source Server Network & Environment:
- Outbound TCP port
443open to SMS control plane:sms.cn-north-4.myhuaweicloud.com(China Site) orsms.ap-southeast-3.myhuaweicloud.com(International Site - Singapore). - Outbound TCP ports
22,8899,8900open to target ECS (public EIP or private IP via VPN/Direct Connect). - NTP Time Synchronization: Source system clock drift must be within 15 minutes of standard time.
- Dependencies: Linux requires
rsync,tar,nohup,python; Windows requires PowerShell 3.0+ and VSS service. - Disk Space: Linux root partition (
/) ≥ 200 MB free space; Windows partitions ≥ 600 MB require ≥ 320 MB free space.
- Outbound TCP port
- IAM Permissions: Sufficient permissions for
SMS FullAccess,ECS CommonOperations,VPC Administrator, andEVS CommonOperations.- See least-privilege definitions in
references/iam-policies.md. - See complete pre-migration checklist in
references/pre-migration-checklist.md.
- See least-privilege definitions in
What ships with it
15 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/acceptance-criteria.md 7.6 KB
- references/agent-deployment-guide.md 5.0 KB
- references/cli-installation-guide.md 2.9 KB
- references/dataflow-diagram.md 3.4 KB
- references/iam-policies.md 11 KB
- references/pre-migration-checklist.md 9.7 KB
- references/related-commands.md 4.7 KB
- references/troubleshooting-guide.md 12 KB
- references/verification-method.md 10 KB
- scripts/test-cli-commands.sh 6.7 KB runs code
- templates/create-task-existing-server.json 2.0 KB
- templates/create-task-windows.json 1.5 KB
- templates/create-task.json 1.5 KB
- templates/create-template.json 1.2 KB
- templates/test-vars.json 4.1 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 29d ago First seen · 336 lines · 169 tokens per session scan B c88b2794ca33
huawei-cloud-sms-host-migrator is a skill published in the GitHub repository huaweicloud/huaweicloud-skills (59 stars, last pushed yesterday), licensed MIT. It adds 169 tokens to every session and 6,231 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-29.
Other skills, from other repositories
ecspresso
ECS deployment tool - deploy, manage, and troubleshoot ECS services.
huawei-cloud-apig-instance-management
Manage Huawei Cloud APIG (API Gateway, dedicated instances) via hcloud CLI: instance lifecycle (create/list/delete), API groups, API create/update/delete, publish/offline, request throttling policies, signature keys, access control (ACL) policies, and public ingress EIP binding, plus read-only diagnosis of public…
huawei-cloud-deployment-task-management
Huawei Cloud CloudDeploy (CodeArts Deploy / 部署) management, execution, and failure analysis using the KooCLI hcloud command-line client. Covers deploy application listing and creation, deployment task listing/detail/creation, task start, task deletion, deployment failure root-cause analysis (agent offline, timeout…
cis-aws-compute-3.1
Ensure Amazon ECS task definitions using 'host' network mode do not allow privileged or root user access to the host.
cis-aws-compute-3.6
Ensure secrets are not passed as container environment variables in Amazon ECS task definitions.
cis-aws-compute-11.1
Ensure customer-managed keys are used to encrypt AWS Fargate ephemeral storage data for Amazon ECS.