Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add nanxiaoyao/network-huawei-skills --skill static-routegit clone --depth 1 https://github.com/nanxiaoyao/network-huawei-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/static-route)<a href="https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/static-route"><img src="https://agentmods.dev/badge/skills/nanxiaoyao/network-huawei-skills/static-route/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/static-route"><img src="https://agentmods.dev/badge/skills/nanxiaoyao/network-huawei-skills/static-route.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00100 | $0.02105 |
| Opus 5 | $0.00050 | $0.01052 |
| Sonnet 5 | $0.00020 | $0.00421 |
| Haiku 4.5 | $0.00010 | $0.00211 |
Grade A, and why
static-route scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 205 lines — stays where its author put it; the contents beside it link to each section on GitHub.
华为交换机静态路由配置技能 (static-route)
适用平台 S 系列 V200R011C10+ ｜ CE 系列 V200R022C00+ 文档来源 华为产品文档 dc_cfg_static-route_*
静态路由是手工配置 适合小型网络与策略路由 大型网络配合动态路由作兜底
触发场景
- 小型网络规划路由
- 配置默认路由 出口
- 浮动静态路由（多链路主备）
- 静态路由 + BFD 实现毫秒级切换
- 静态路由 + NQA 实现链路探测
- 跨网段路由不通排查
- IPv6 静态路由配置
静态路由优先级
| 路由类型 | 默认优先级 |
|---|---|
| Direct（直连） | 0 |
| OSPF | 10 |
| IS-IS | 15 |
| Static | 60（可改） |
| RIP | 100 |
| BGP-External | 255 |
数值越小越优先 → 静态路由 60 默认低于 OSPF 高于 BGP
浮动静态路由：把备份链路静态路由优先级调高（数值更大）
配置三步走
1 基础 IPv4 静态路由
system-view
ip route-static <目的网络> <掩码> <下一跳IP|出接口>
2 默认路由（最常用）
ip route-static 0.0.0.0 0.0.0.0 <下一跳IP>
3 验证
display ip routing-table
display ip routing-table protocol static
高级用法
浮动静态路由 主备链路
# 主链路 优先级默认 60
ip route-static 192.168.10.0 24 10.1.1.2
# 备链路 优先级 100（数值越大越不优先）
ip route-static 192.168.10.0 24 10.2.1.2 preference 100
主链路 down 后 备链路自动接管
静态路由 + BFD 联动 毫秒级切换
# 1 建 BFD 会话
bfd
quit
bfd to_R2 bind peer-ip 10.1.1.2 source-ip 10.1.1.1
discriminator local 1
discriminator remote 1
commit
# 2 静态路由绑 BFD
ip route-static 192.168.10.0 24 10.1.1.2 track bfd-session to_R2
对端 BFD 检测到链路 down 立即触发路由切换（毫秒级 比物理 down 检测快）
静态路由 + NQA 联动 端到端探测
# 1 创建 NQA 探测
nqa test-instance admin to_server
test-type icmp
destination-address ipv4 8.8.8.8
frequency 5
start now
# 2 静态路由绑 NQA
ip route-static 0.0.0.0 0.0.0.0 10.1.1.2 track nqa admin to_server
NQA 探测失败 → 路由失效 → 切到备份
永久发布
ip route-static 10.0.0.0 8 NULL0 permanent
即使出接口 down 也保留路由（黑洞路由防环用）
IPv6 静态路由
ipv6
ipv6 route-static 2001:db8::1 64 fe80::1 GigabitEthernet0/0/1
ipv6 route-static :: 0 2001:db8::1 # IPv6 默认路由
display ipv6 routing-table
命令体系
配置
| 命令 | 视图 | 说明 |
|---|---|---|
| ip route-static | | system | 创建静态路由 |
| ip route-static preference | system | 指定优先级 |
| ip route-static tag | system | 路由 tag |
| ip route-static description | system | 描述 |
| ip route-static track bfd-session | system | BFD 联动 |
| ip route-static track nqa | system | NQA 联动 |
| ip route-static permanent | system | 永久发布 |
| ip route-static permanent | system | 出接口永久 |
| ip route-static default-preference | system | 改默认优先级 |
| ip route-static vpn-instance | system | VPN 实例静态 |
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 205 lines · 100 tokens per session scan A e1efe58d528a
static-route is a skill published in the GitHub repository nanxiaoyao/network-huawei-skills (2 stars, last pushed 1mo ago), licensed MIT. It adds 100 tokens to every session and 2,105 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
percepxion-oob
Manage Lantronix out-of-band (OOB) infrastructure via Percepxion central management platform: device inventory, serial port inspection via SLC CLI, firmware compliance, config management, security auditing, and closed-loop incident remediation. Use during outages, maintenance windows, compliance cycles, and…
meraki-security-appliance
Cisco Meraki MX security appliance (read-only) — L3/L7 firewall rules, content filtering, IDS/IPS and AMP settings, site-to-site VPN, traffic shaping via Cisco's official Meraki MCP. Use when auditing Meraki firewall rules, reviewing content filtering, or inspecting MX VPN configuration.
unifi-wifi
Use when UniFi Wi-Fi is slow, unstable, or being tuned: "my wifi is slow but speedtest on the router is fast", "great signal, terrible speed", "should I use 80MHz or 40MHz", "channel planning", "co-channel interference", "DFS channels", "my APs keep picking the same channel", "audit my SSIDs", "hidden SSID", or…
unifi-connect
Use when connecting an agent to a UniFi gateway (UDM Pro, UDM SE, Cloud Gateway) for the first time, or when API calls to one are failing: empty response bodies, curl returning HTTP 000, 401 on a key that works elsewhere, "how do I get a UniFi API key", "SSH is closed on my UDM", "connect to UniFi", "talk to my UniFi…
unifi-clients
Use when operating on UniFi clients, devices, switch ports, or DHCP: "block a device", "kick a client off wifi", "restart an access point", "power cycle a PoE port", "move a device to a different VLAN", "my device is on the wrong subnet after I changed the port", "set a DHCP reservation", "change DHCP DNS servers"…
unifi-context-map
Use when an agent keeps guessing wrong about a UniFi network, when starting recurring agent work against a gateway, or when asked to "map my network", "document my UniFi setup", "build a network inventory", "what's on my network", "why does the agent keep using the wrong AP", or "audit my reservations against…