Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ontology-of-everything/SemanticSkills --skill huawei-cloud-account-onboardinggit clone --depth 1 https://github.com/ontology-of-everything/SemanticSkillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ontology-of-everything/semanticskills/huawei-cloud-account-onboarding)<a href="https://agentmods.dev/skills/ontology-of-everything/semanticskills/huawei-cloud-account-onboarding"><img src="https://agentmods.dev/badge/skills/ontology-of-everything/semanticskills/huawei-cloud-account-onboarding/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ontology-of-everything/semanticskills/huawei-cloud-account-onboarding"><img src="https://agentmods.dev/badge/skills/ontology-of-everything/semanticskills/huawei-cloud-account-onboarding.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00139 | $0.00768 |
| Opus 5 | $0.00069 | $0.00384 |
| Sonnet 5 | $0.00028 | $0.00154 |
| Haiku 4.5 | $0.00014 | $0.00077 |
Grade A, and why
huawei-cloud-account-onboarding scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
华为云账号开通 · 实名认证引导
华为社区版 · 社区维护，非华为云官方；结论以当次 hcloud 响应为准。
凭 hcloud ≥7.2 只读回答一件事：这个账号现在能不能买东西。已实名则确认了事；未实名把人脸二维码递到用户手机上，盯到认证落地。
三步
- 查状态 —— 先跑
ShowRealNameAuthStatus，按四态分流。取码命令不校验实名状态，已实名账号照样返回可用二维码，门禁只能由技能承担。 - 递二维码 —— 仅当未实名、且用户此刻能拿手机时才取码，交
scripts/render-qr.ts渲染。地址是一次性凭据：不落盘、不转发、不复用。 - 盯落地 —— 用 waiter 轮询至已实名；超时先问用户再重取，不自动重发。
命令、响应字段与取值一律抄 references/commands.md，不用 --help 现场发现、不自拼参数。无 hcloud profile 时停下，请用户自行配置，不代写凭证。
红线
- 只读 —— 不提交、不变更、不撤销认证，写命令一律拒绝。
- 不收材料 —— 身份证号、证件照、银行卡号、短信验证码一律拒收并提示删除；三步流程不需要其中任何一项。
- 不代认证 —— 不代扫码、不代做活体、不把二维码给他人；代做会被华为云判定非本人并可能冻结账号。
- 只做人脸通道 —— 企业认证、证件认证、银行卡认证、认证变更、审核意见查询均指路控制台「账号中心 → 实名认证」；非华为云或通用 KYC 说明超出范围。
References
实体与四态状态机 references/concepts.md · 命令与字段 references/commands.md · 二维码渲染 scripts/render-qr.ts（npx tsx render-qr.ts <地址>；首次先 cd scripts && npm install）
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 40 lines · 139 tokens per session scan A bf41b2b6314a
huawei-cloud-account-onboarding is a skill published in the GitHub repository ontology-of-everything/SemanticSkills (8 stars, last pushed 2d ago), licensed Apache-2.0. It adds 139 tokens to every session and 768 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
vastai
Vast.ai CLI to manage GPU instances, volumes, serverless endpoints, and billing.
vastai-sdk
Vast.ai Python SDK — high-level API for GPU instances, volumes, serverless endpoints, and billing.
alibaba-cloud
Alibaba Cloud integration. Manage data, records, and automate workflows. Use when the user wants to interact with Alibaba Cloud data.
open-codex-ui
Install, update, secure, daemonize, expose through Cloudflare Tunnel, and enable speech input for the open-source Open Codex UI application. Use when a user asks to install or enable Open Codex UI, configure its login daemon, set its access password, install or manage the sherpa-onnx bilingual speech model…
cloud-architect
Designs cloud architectures, creates migration plans, generates cost optimization recommendations, and produces disaster recovery strategies across AWS, Azure, and GCP. Use when designing cloud architectures, planning migrations, or optimizing multi-cloud deployments. Invoke for Well-Architected Framework, cost…
django-storages-s3
Use when configuring Django to store static and media files on AWS S3 with django-storages. Invoke when working with the STORAGES setting, S3 buckets, presigned URLs, CloudFront, or boto3-backed file storage in settings.py. Configures the Django 4.2+ STORAGES dict, public/private custom backends, presigned GET/POST…