Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add nanxiaoyao/network-huawei-skills --skill ha-hrpgit clone --depth 1 https://github.com/nanxiaoyao/network-huawei-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/ha-hrp)<a href="https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/ha-hrp"><img src="https://agentmods.dev/badge/skills/nanxiaoyao/network-huawei-skills/ha-hrp/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/ha-hrp"><img src="https://agentmods.dev/badge/skills/nanxiaoyao/network-huawei-skills/ha-hrp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00109 | $0.02245 |
| Opus 5 | $0.00055 | $0.01123 |
| Sonnet 5 | $0.00022 | $0.00449 |
| Haiku 4.5 | $0.00011 | $0.00225 |
Grade A, and why
ha-hrp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 179 lines — stays where its author put it; the contents beside it link to each section on GitHub.
华为 USG 双机热备配置技能 (ha-hrp)
适用平台 USG6000E 系列 适用版本 V600R007C20+ 文档来源 HUAWEI USG6000E V600R007C20 产品文档 (案例编号 sec_case_ha_0001-0030)
USG 双机热备由 VGMP+HRP+VRRP 三者协同实现 VGMP 管理状态 HRP 备份配置和会话 VRRP 对外提供虚拟网关 任一台 FW 故障 业务秒级切换
触发场景
- 双机主备备份 active-standby 部署
- 双机负载分担 load-balancing 部署
- 防火墙二层透明接入主备
- 旁挂交换机 静态路由引流双机
- 镜像模式双机
- 虚拟系统双机
- 配置不同步 主备状态异常
- HRP 心跳通道异常 备份链路抖动
- 业务切换不丝滑 切换丢包多
三层组件协作模型
┌──────────────────────────────────────────────┐
│ VRRP 对外虚拟 IP 终端网关无感知切换 │
├──────────────────────────────────────────────┤
│ VGMP 组管理 决定整机主备 防止脑裂 │
├──────────────────────────────────────────────┤
│ HRP 配置/会话备份 心跳链路心跳 │
└──────────────────────────────────────────────┘
VGMP 是核心 VRRP 备份组加入 VGMP 管理 整机主备状态由 VGMP 决定 不再由单个 VRRP 自行选举
主流组网类型 选型表
| 组网 | 适用 | 上下行设备 | 关键技术 |
|---|---|---|---|
| 三层主备直连交换机 | 最经典 出口防火墙 | 交换机 | VRRP + VGMP |
| 三层主备连路由器 | ISP 给单 IP | 路由器 | VRRP + VGMP |
| 三层 OSPF 主备 | 上联路由器跑动态路由 | 路由器 | OSPF cost 调整 + VGMP |
| 二层透明主备 | 防火墙不当网关 | 上下交换机 | VLAN + VGMP |
| 三层负载分担 | 流量大 双活 | 交换机 | 双 VRRP 互为主备 |
| 旁挂静态路由 | 不改原有组网 | 交换机引流 | 静态路由 + VGMP |
| 虚拟系统 HA | 多租户隔离 | 同上 | vsys + 独立 VRRP |
| 镜像模式 | 抢救流量不丢 | 任意 | 镜像配置 + 会话同步 |
配置六步走 标准范式
1 接口 IP 与安全区域
两台 FW 业务接口规划相同 IP 不同 例如 GE0/0/1 主 10.2.0.1 备 10.2.0.2
2 配置 VRRP 备份组
上下行业务接口都要配 VRID 区分 主侧 active 备侧 standby
interface GigabitEthernet 0/0/1
vrrp vrid 1 virtual-ip 1.1.1.1 24 active # 主
vrrp vrid 1 virtual-ip 1.1.1.1 24 standby # 备
3 配置心跳口与 HRP
心跳口必须直连 不接安全区域 不配业务路由 走独立接口（如 GE0/0/7）
hrp interface GigabitEthernet 0/0/7 remote 10.10.0.2
hrp enable
启用后命令行出现 HRP_M / HRP_S 提示符
4 同步配置 在主上配 自动同步到备
启用 hrp enable 后 在主侧（HRP_M）配置安全策略 NAT 路由等 自动推到备
显式触发同步：hrp auto-sync config（默认开）
5 安全策略 NAT 等业务配置
注意 全部在主侧 HRP_M 配置 备侧 HRP_S 不要动 否则告警
6 验证与切换演练
拔主侧上行口 看备升主 业务丢包应 <3 秒
命令体系
VRRP
interface <if>
vrrp vrid <id> virtual-ip <ip> [<mask>] { active | standby }
vrrp vrid <id> priority <num> # 优先级
vrrp vrid <id> preempt-mode timer delay <s> # 抢占延时
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 179 lines · 109 tokens per session scan A fde2e4ee2d1d
ha-hrp is a skill published in the GitHub repository nanxiaoyao/network-huawei-skills (2 stars, last pushed 1mo ago), licensed MIT. It adds 109 tokens to every session and 2,245 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
chinese-git-workflow
A reference for configuring Git with Chinese code-hosting services such as Gitee, Coding.net, GitLab China, and CNB, including SSH, HTTPS, credentials, CI, and repository mirroring.
chinese-documentation
A Chinese technical-documentation style guide covering spacing, punctuation, numbers, terminology, and links when Chinese and English appear together.
patent-map
A tool for making a visual map of stored patent case notes in an Obsidian vault. Obsidian is a note-taking application that stores linked text files.
seedance-vocab-zh
This skill should be used when the user asks for Chinese Seedance 2.0 prompt wording, Mandarin cinematic vocabulary, Chinese prompt compression, or translation of camera, lighting, action, VFX, audio, and production terms into Chinese.
percepxion-oob
Manage Lantronix out-of-band (OOB) infrastructure via Percepxion central management platform: device inventory, serial port inspection via SLC CLI, firmware compliance, config management, security auditing, and closed-loop incident remediation. Use during outages, maintenance windows, compliance cycles, and…
fmc-firewall-ops
Cisco Secure Firewall FMC — access policy search, rule inspection, FTD device targeting, multi-FMC profile management. Use when searching firewall rules by IP or FQDN, checking if host A can reach host B through the firewall, auditing FMC access policies, or reviewing SGT-based segmentation rules.