Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add nanxiaoyao/network-huawei-skills --skill vlan-configgit clone --depth 1 https://github.com/nanxiaoyao/network-huawei-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/vlan-config)<a href="https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/vlan-config"><img src="https://agentmods.dev/badge/skills/nanxiaoyao/network-huawei-skills/vlan-config/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/vlan-config"><img src="https://agentmods.dev/badge/skills/nanxiaoyao/network-huawei-skills/vlan-config.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00124 | $0.02061 |
| Opus 5 | $0.00062 | $0.01030 |
| Sonnet 5 | $0.00025 | $0.00412 |
| Haiku 4.5 | $0.00012 | $0.00206 |
Grade A, and why
vlan-config scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 230 lines — stays where its author put it; the contents beside it link to each section on GitHub.
华为交换机 VLAN 配置技能 (vlan-config)
适用平台 S1720/S2700/S5700/S6720 V200R011C10+ ｜ CloudEngine 5800-9800 V200R022C00+ 文档来源 华为 S 系列与 CloudEngine 系列产品文档 (dc_cfg_vlan_*)
VLAN 是交换机最基础也是最高频的配置 划分广播域 隔离用户 简化网络管理
触发场景
- 新建 VLAN 划分网段
- 配置 Access/Trunk/Hybrid 接口
- 配置 VLANIF 实现 VLAN 间互访
- 终端 PC 跨 VLAN 不通
- 配置 voice VLAN（语音 IP 电话）
- 管理 VLAN（telnet/SSH 登录用）
- VLAN 内/间隔离
- Trunk 链路两端不通
- 配置 Super-VLAN / MUX-VLAN
接口类型对比（最常错点）
| 类型 | 用途 | 收报文 | 发报文 |
|---|---|---|---|
| Access | 接终端 PC/打印机 | 收 untag 打 PVID | 剥 PVID 后 untag 出 |
| Trunk | 交换机互联 | 收 tag 透传 收 untag 打 PVID | 等于 PVID 时剥 tag 出 其他 tag 出 |
| Hybrid | 混合（兼容场景） | 灵活控制 tagged/untagged | 可指定哪些 VLAN tagged 哪些 untagged |
记忆口诀：Access 接终端 Trunk 接交换机 Hybrid 当救火
配置六步走
1 创建 VLAN
system-view
vlan batch 10 20 30 # 批量创建
vlan 10 # 单个创建并进入
description Sales # 描述
quit
2 接口配 Access（接终端）
interface GigabitEthernet 0/0/1
port link-type access
port default vlan 10
3 接口配 Trunk（交换机互联）
interface GigabitEthernet 0/0/24
port link-type trunk
port trunk allow-pass vlan 10 20 30 # 放通哪些 VLAN
port trunk pvid vlan 1 # PVID 默认 1 不动也行
⚠️ 不要写
port trunk allow-pass vlan all除非真的要全放通 容易引入广播风暴
4 接口配 Hybrid（灵活控制）
interface GigabitEthernet 0/0/2
port link-type hybrid
port hybrid pvid vlan 10
port hybrid untagged vlan 10 20 # 这些 VLAN 出去时剥 tag
port hybrid tagged vlan 30 # 这个 VLAN 出去保留 tag
5 VLANIF 三层互访
interface Vlanif 10
ip address 10.10.10.1 24
interface Vlanif 20
ip address 10.10.20.1 24
终端网关指向 VLANIF 的 IP 即可实现 VLAN 间路由
6 验证
display vlan
display vlan summary
display port vlan
display interface Vlanif 10
常用命令速查
VLAN 管理
vlan batch <start> [ to <end> ] # 批量创建
display vlan
display vlan <vid>
display vlan summary
接口模式
port link-type { access | trunk | hybrid }
port default vlan <vid> # access
port trunk allow-pass vlan { <list> | all }
port trunk pvid vlan <vid>
port hybrid pvid vlan <vid>
port hybrid untagged vlan <list>
port hybrid tagged vlan <list>
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 230 lines · 124 tokens per session scan A 4e0adb95651f
vlan-config is a skill published in the GitHub repository nanxiaoyao/network-huawei-skills (2 stars, last pushed 1mo ago), licensed MIT. It adds 124 tokens to every session and 2,061 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
percepxion-oob
Manage Lantronix out-of-band (OOB) infrastructure via Percepxion central management platform: device inventory, serial port inspection via SLC CLI, firmware compliance, config management, security auditing, and closed-loop incident remediation. Use during outages, maintenance windows, compliance cycles, and…
meraki-security-appliance
Cisco Meraki MX security appliance (read-only) — L3/L7 firewall rules, content filtering, IDS/IPS and AMP settings, site-to-site VPN, traffic shaping via Cisco's official Meraki MCP. Use when auditing Meraki firewall rules, reviewing content filtering, or inspecting MX VPN configuration.
unifi-wifi
Use when UniFi Wi-Fi is slow, unstable, or being tuned: "my wifi is slow but speedtest on the router is fast", "great signal, terrible speed", "should I use 80MHz or 40MHz", "channel planning", "co-channel interference", "DFS channels", "my APs keep picking the same channel", "audit my SSIDs", "hidden SSID", or…
unifi-connect
Use when connecting an agent to a UniFi gateway (UDM Pro, UDM SE, Cloud Gateway) for the first time, or when API calls to one are failing: empty response bodies, curl returning HTTP 000, 401 on a key that works elsewhere, "how do I get a UniFi API key", "SSH is closed on my UDM", "connect to UniFi", "talk to my UniFi…
unifi-clients
Use when operating on UniFi clients, devices, switch ports, or DHCP: "block a device", "kick a client off wifi", "restart an access point", "power cycle a PoE port", "move a device to a different VLAN", "my device is on the wrong subnet after I changed the port", "set a DHCP reservation", "change DHCP DNS servers"…
unifi-context-map
Use when an agent keeps guessing wrong about a UniFi network, when starting recurring agent work against a gateway, or when asked to "map my network", "document my UniFi setup", "build a network inventory", "what's on my network", "why does the agent keep using the wrong AP", or "audit my reservations against…