Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add nanxiaoyao/network-huawei-skills --skill nat-configgit clone --depth 1 https://github.com/nanxiaoyao/network-huawei-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/nat-config)<a href="https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/nat-config"><img src="https://agentmods.dev/badge/skills/nanxiaoyao/network-huawei-skills/nat-config/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/nat-config"><img src="https://agentmods.dev/badge/skills/nanxiaoyao/network-huawei-skills/nat-config.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00109 | $0.01767 |
| Opus 5 | $0.00055 | $0.00883 |
| Sonnet 5 | $0.00022 | $0.00353 |
| Haiku 4.5 | $0.00011 | $0.00177 |
Grade A, and why
nat-config scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 200 lines — stays where its author put it; the contents beside it link to each section on GitHub.
华为 USG NAT 配置技能 (nat-config)
适用平台 USG6000E 系列 适用版本 V600R007C20+ 文档来源 HUAWEI USG6000E V600R007C20 产品文档
USG 的 NAT 采用策略式 NAT-Policy 与目的 NAT Server 两套独立体系 与传统路由器的 ACL+NAT 模型完全不同 本技能覆盖源 NAT 目的 NAT 双向 NAT 配置与排错
触发场景
- 配置源 NAT 内网访问外网
- 配置 NAT Server 外网访问内网服务器
- 配置 Easy-IP 出接口 NAT
- NAT 不生效排错
- 查看 NAT 会话/地址池/统计
- CGN 大规模 NAT 场景
- NAT64 IPv6 转 IPv4
核心概念
USG NAT 分两大类
- 源 NAT source NAT 转换源 IP 通常内网到外网
- 目的 NAT destination NAT 转换目的 IP 通常外网到内网服务器即 NAT Server
源 NAT 三种模式
- NAPT 多对多带端口转换 最常用
- No-PAT 多对多无端口转换
- Easy-IP 转换为出接口 IP
地址池 nat address-group 是 NAT 的核心资源
命令体系
1 NAT 策略视图 源 NAT
进入策略视图 system-view nat-policy
创建规则 rule name source-zone destination-zone source-address destination-address service action source-nat address-group action source-nat easy-ip action no-nat enable
2 地址池
system-view nat address-group [group-number] section mode pat mode no-pat local mode no-pat global mode full-cone global route enable quit
3 NAT Server 目的 NAT
基本语法 nat server [name] protocol global inside
举例 外网访问内部 web 服务器 nat server www_server protocol tcp global 1.1.1.10 80 inside 10.1.1.100 80 nat server zone untrust protocol tcp global interface GigabitEthernet1/0/1 8080 inside 10.1.1.100 80
4 查看命令
display nat-policy rule all display nat-policy rule name display nat-policy rule source-zone destination-zone display nat address-group [name] display nat server [all-systems | name | id | global-ip | inside-ip ] display nat statistics display nat_resource_usage_address-group display firewall session table | include NAT display nat_no-pat_statistics display nat_port_block_syslog_configuration display nat_static_mapping_global-ipv4 display nat_static_mapping_inside-ipv4 display nat64 all
5 重置
reset nat-policy counter reset nat-policy counter rule name
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 200 lines · 109 tokens per session scan A 204a9974e722
nat-config is a skill published in the GitHub repository nanxiaoyao/network-huawei-skills (2 stars, last pushed 1mo ago), licensed MIT. It adds 109 tokens to every session and 1,767 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
chinese-git-workflow
A reference for configuring Git with Chinese code-hosting services such as Gitee, Coding.net, GitLab China, and CNB, including SSH, HTTPS, credentials, CI, and repository mirroring.
chinese-documentation
A Chinese technical-documentation style guide covering spacing, punctuation, numbers, terminology, and links when Chinese and English appear together.
patent-map
A tool for making a visual map of stored patent case notes in an Obsidian vault. Obsidian is a note-taking application that stores linked text files.
seedance-vocab-zh
This skill should be used when the user asks for Chinese Seedance 2.0 prompt wording, Mandarin cinematic vocabulary, Chinese prompt compression, or translation of camera, lighting, action, VFX, audio, and production terms into Chinese.
percepxion-oob
Manage Lantronix out-of-band (OOB) infrastructure via Percepxion central management platform: device inventory, serial port inspection via SLC CLI, firmware compliance, config management, security auditing, and closed-loop incident remediation. Use during outages, maintenance windows, compliance cycles, and…
fmc-firewall-ops
Cisco Secure Firewall FMC — access policy search, rule inspection, FTD device targeting, multi-FMC profile management. Use when searching firewall rules by IP or FQDN, checking if host A can reach host B through the firewall, auditing FMC access policies, or reviewing SGT-based segmentation rules.