npm - huaweicloud-devkit - Versions diffs - 0.1.24 → 0.1.26-dev.0 - Mend

huaweicloud-devkit 0.1.24 → 0.1.26-dev.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (27) hide show

package/README.md CHANGED Viewed

@@ -76,7 +76,7 @@ npx --yes huaweicloud-devkit uninstall --target codearts # 卸载
 ```json
 {
   "mcp": {
-    "huaweicloud": {
+    "huaweicloud-devkit": {
       "type": "local",
       "command": ["node", "<路径>/plugins/huaweicloud-core/src/mcp-server.mjs"],
       "enabled": true
@@ -123,7 +123,7 @@ Agent 技能是经过整理的指令和参考材料包，帮助 Agent 完成特
 - **安全优先执行** — 所有 `hcloud` 命令执行前自动分类（读/写/密钥），写操作需用户明确批准。
 - **输出脱敏** — 凭证形态的值（AK/SK、Token、密码）自动替换为 `***REDACTED***`。
-- **12 个结构化工具** — 技能搜索、CLI 检查、只读命令、区域发现、错误解释等。
+- **16 个结构化工具** — 技能搜索、CLI 检查、只读命令、区域发现、错误解释、Hook 风险检查等。
 - **零运行时依赖** — 纯 Node.js（>= 20），无需 npm install。
 详见 [MCP 工具表](#mcp-工具)。
@@ -154,6 +154,9 @@ Agent 技能是经过整理的指令和参考材料包，帮助 Agent 完成特
 | CLI | `huaweicloud_run_readonly_command` | 执行只读命令并脱敏输出 |
 | CLI | `huaweicloud_run_approved_command` | 经用户明确批准后执行写命令 |
 | 安全 | `huaweicloud_show_profile_redacted` | 安全查看 KooCLI 配置（凭证脱敏） |
+| 安全 | `huaweicloud_hook_check_command` | 执行前检查 Shell/KooCLI 命令风险 |
+| 安全 | `huaweicloud_hook_check_artifacts` | 检查生成的代码、IaC、IAM/OBS 策略和配置文件风险 |
+| 安全 | `huaweicloud_hook_check_deploy_plan` | 检查沙箱、预览环境和云资源部署计划风险 |
 | 路由 | `huaweicloud_service_catalog` | 返回推荐的能力来源排序 |
 | 排错 | `huaweicloud_explain_error` | 解释错误码并建议诊断步骤 |

package/integrations/opencode/opencode.json CHANGED Viewed

@@ -2,7 +2,7 @@
   "$schema": "https://opencode.ai/config.json",
   "_note": "Merge this into ~/.config/opencode/opencode.jsonc. Replace the path with the absolute path to your mcp-server.mjs installation.",
   "mcp": {
-    "huaweicloud": {
+    "huaweicloud-devkit": {
       "type": "local",
       "command": [
         "node",

package/integrations/opencode/skills/huaweicloud-core/SKILL.md CHANGED Viewed

@@ -20,6 +20,8 @@ Use this skill as the OpenCode entry point. Prefer the full skill set under `plu
 Never ask the user to paste credentials. Never read `.hcloud` or `.huaweicloud` files into context. Plan writes first, ask for explicit approval, then verify with read-only checks.
+For commands that assemble Huawei Cloud parameters through variables, string concatenation, subshells, encoded payloads, or generated scripts, inspect the final expanded command text before execution. If OpenCode cannot determine the final values, ask for explicit review or run the planning/check tool on the expanded command.
 ## KooCLI Basics
 - Install guide: `https://support.huaweicloud.com/qs-hcli/hcli_02_003.html`.

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
     "name": "huaweicloud-devkit",
-    "version": "0.1.24",
+    "version": "0.1.26-dev.0",
     "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
     "type": "module",
     "files": [

package/plugins/huaweicloud-core/.claude-plugin/plugin.json CHANGED Viewed

@@ -1,44 +1,44 @@
 {
-  "interface": {
-    "displayName": "HuaweiCloud Devkit",
-    "shortDescription": "HuaweiCloud Devkit - Huawei Cloud guidance, CLI/API/SDK routing, MCP tools, and safety for coding agents.",
-    "longDescription": "HuaweiCloud Devkit helps coding agents choose and use Huawei Cloud Skills, KooCLI, APIs, SDKs, and MCP tools with less context, safer command execution, and more accurate cloud implementation decisions.",
-    "developerName": "HuaweiCloud Mate",
-    "category": "Cloud",
-    "capabilities": [
-      "Read",
-      "Interactive"
-    ],
-    "websiteURL": "https://github.com/huaweicloud-mate/huaweicloud-devkit",
-    "brandColor": "#C7000B",
-    "defaultPrompt": [
-      "Help me choose the right Huawei Cloud capability.",
-      "Check my Huawei Cloud CLI setup safely.",
-      "Plan this Huawei Cloud API or SDK task."
-    ]
-  },
-  "mcpServers": "./.mcp.json",
-  "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
-  "skills": "./skills/",
-  "version": "0.1.24",
-  "author": {
-    "name": "HuaweiCloud Mate",
-    "url": "https://github.com/huaweicloud-mate"
-  },
-  "hooks": "./hooks/",
-  "name": "huaweicloud-core",
-  "homepage": "https://github.com/huaweicloud-mate/huaweicloud-devkit",
-  "repository": "https://github.com/huaweicloud-mate/huaweicloud-devkit",
-  "license": "Apache-2.0",
-  "keywords": [
-    "huaweicloud",
-    "huawei-cloud",
-    "koocli",
-    "hcloud",
-    "agent",
-    "mcp",
-    "api",
-    "sdk",
-    "skills"
-  ]
-}
+    "interface":  {
+                      "displayName":  "HuaweiCloud Devkit",
+                      "shortDescription":  "HuaweiCloud Devkit - Huawei Cloud guidance, CLI/API/SDK routing, MCP tools, and safety for coding agents.",
+                      "longDescription":  "HuaweiCloud Devkit helps coding agents choose and use Huawei Cloud Skills, KooCLI, APIs, SDKs, and MCP tools with less context, safer command execution, and more accurate cloud implementation decisions.",
+                      "developerName":  "HuaweiCloud Mate",
+                      "category":  "Cloud",
+                      "capabilities":  [
+                                           "Read",
+                                           "Interactive"
+                                       ],
+                      "websiteURL":  "https://github.com/huaweicloud-mate/huaweicloud-devkit",
+                      "brandColor":  "#C7000B",
+                      "defaultPrompt":  [
+                                            "Help me choose the right Huawei Cloud capability.",
+                                            "Check my Huawei Cloud CLI setup safely.",
+                                            "Plan this Huawei Cloud API or SDK task."
+                                        ]
+                  },
+    "mcpServers":  "./.mcp.json",
+    "description":  "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
+    "skills":  "./skills/",
+    "version":  "0.1.23",
+    "author":  {
+                   "name":  "HuaweiCloud Mate",
+                   "url":  "https://github.com/huaweicloud-mate"
+               },
+    "hooks":  "./hooks/",
+    "name":  "huaweicloud-core",
+    "homepage":  "https://github.com/huaweicloud-mate/huaweicloud-devkit",
+    "repository":  "https://github.com/huaweicloud-mate/huaweicloud-devkit",
+    "license":  "Apache-2.0",
+    "keywords":  [
+                     "huaweicloud",
+                     "huawei-cloud",
+                     "koocli",
+                     "hcloud",
+                     "agent",
+                     "mcp",
+                     "api",
+                     "sdk",
+                     "skills"
+                 ]
+}

package/plugins/huaweicloud-core/.codex-plugin/plugin.json CHANGED Viewed

@@ -1,43 +1,43 @@
 {
-  "name": "huaweicloud-core",
-  "version": "0.1.24",
-  "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
-  "author": {
-    "name": "HuaweiCloud Mate",
-    "url": "https://github.com/huaweicloud-mate"
-  },
-  "homepage": "https://github.com/huaweicloud-mate/huaweicloud-devkit",
-  "repository": "https://github.com/huaweicloud-mate/huaweicloud-devkit",
-  "license": "Apache-2.0",
-  "keywords": [
-    "huaweicloud",
-    "huawei-cloud",
-    "koocli",
-    "hcloud",
-    "agent",
-    "mcp",
-    "api",
-    "sdk",
-    "skills"
-  ],
-  "skills": "./skills/",
-  "mcpServers": "./.mcp.json",
-  "interface": {
-    "displayName": "HuaweiCloud Devkit",
-    "shortDescription": "HuaweiCloud Devkit - Huawei Cloud guidance, CLI/API/SDK routing, MCP tools, and safety for coding agents.",
-    "longDescription": "HuaweiCloud Devkit helps coding agents choose and use Huawei Cloud Skills, KooCLI, APIs, SDKs, and MCP tools with less context, safer command execution, and more accurate cloud implementation decisions.",
-    "developerName": "HuaweiCloud Mate",
-    "category": "Cloud",
-    "capabilities": [
-      "Read",
-      "Interactive"
-    ],
-    "websiteURL": "https://github.com/huaweicloud-mate/huaweicloud-devkit",
-    "brandColor": "#C7000B",
-    "defaultPrompt": [
-      "Help me choose the right Huawei Cloud capability.",
-      "Check my Huawei Cloud CLI setup safely.",
-      "Plan this Huawei Cloud API or SDK task."
-    ]
-  }
-}
+    "name":  "huaweicloud-core",
+    "version":  "0.1.23",
+    "description":  "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
+    "author":  {
+                   "name":  "HuaweiCloud Mate",
+                   "url":  "https://github.com/huaweicloud-mate"
+               },
+    "homepage":  "https://github.com/huaweicloud-mate/huaweicloud-devkit",
+    "repository":  "https://github.com/huaweicloud-mate/huaweicloud-devkit",
+    "license":  "Apache-2.0",
+    "keywords":  [
+                     "huaweicloud",
+                     "huawei-cloud",
+                     "koocli",
+                     "hcloud",
+                     "agent",
+                     "mcp",
+                     "api",
+                     "sdk",
+                     "skills"
+                 ],
+    "skills":  "./skills/",
+    "mcpServers":  "./.mcp.json",
+    "interface":  {
+                      "displayName":  "HuaweiCloud Devkit",
+                      "shortDescription":  "HuaweiCloud Devkit - Huawei Cloud guidance, CLI/API/SDK routing, MCP tools, and safety for coding agents.",
+                      "longDescription":  "HuaweiCloud Devkit helps coding agents choose and use Huawei Cloud Skills, KooCLI, APIs, SDKs, and MCP tools with less context, safer command execution, and more accurate cloud implementation decisions.",
+                      "developerName":  "HuaweiCloud Mate",
+                      "category":  "Cloud",
+                      "capabilities":  [
+                                           "Read",
+                                           "Interactive"
+                                       ],
+                      "websiteURL":  "https://github.com/huaweicloud-mate/huaweicloud-devkit",
+                      "brandColor":  "#C7000B",
+                      "defaultPrompt":  [
+                                            "Help me choose the right Huawei Cloud capability.",
+                                            "Check my Huawei Cloud CLI setup safely.",
+                                            "Plan this Huawei Cloud API or SDK task."
+                                        ]
+                  }
+}

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json CHANGED Viewed

@@ -1,44 +1,44 @@
 {
-  "interface": {
-    "displayName": "HuaweiCloud Devkit",
-    "shortDescription": "HuaweiCloud Devkit - Huawei Cloud guidance, CLI/API/SDK routing, MCP tools, and safety for coding agents.",
-    "longDescription": "HuaweiCloud Devkit helps coding agents choose and use Huawei Cloud Skills, KooCLI, APIs, SDKs, and MCP tools with less context, safer command execution, and more accurate cloud implementation decisions.",
-    "developerName": "HuaweiCloud Mate",
-    "category": "Cloud",
-    "capabilities": [
-      "Read",
-      "Interactive"
-    ],
-    "websiteURL": "https://github.com/huaweicloud-mate/huaweicloud-devkit",
-    "brandColor": "#C7000B",
-    "defaultPrompt": [
-      "Help me choose the right Huawei Cloud capability.",
-      "Check my Huawei Cloud CLI setup safely.",
-      "Plan this Huawei Cloud API or SDK task."
-    ]
-  },
-  "mcpServers": "./.mcp.json",
-  "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
-  "skills": "./skills/",
-  "version": "0.1.24",
-  "author": {
-    "name": "HuaweiCloud Mate",
-    "url": "https://github.com/huaweicloud-mate"
-  },
-  "hooks": "./hooks/",
-  "name": "huaweicloud-core",
-  "homepage": "https://github.com/huaweicloud-mate/huaweicloud-devkit",
-  "repository": "https://github.com/huaweicloud-mate/huaweicloud-devkit",
-  "license": "Apache-2.0",
-  "keywords": [
-    "huaweicloud",
-    "huawei-cloud",
-    "koocli",
-    "hcloud",
-    "agent",
-    "mcp",
-    "api",
-    "sdk",
-    "skills"
-  ]
-}
+    "interface":  {
+                      "displayName":  "HuaweiCloud Devkit",
+                      "shortDescription":  "HuaweiCloud Devkit - Huawei Cloud guidance, CLI/API/SDK routing, MCP tools, and safety for coding agents.",
+                      "longDescription":  "HuaweiCloud Devkit helps coding agents choose and use Huawei Cloud Skills, KooCLI, APIs, SDKs, and MCP tools with less context, safer command execution, and more accurate cloud implementation decisions.",
+                      "developerName":  "HuaweiCloud Mate",
+                      "category":  "Cloud",
+                      "capabilities":  [
+                                           "Read",
+                                           "Interactive"
+                                       ],
+                      "websiteURL":  "https://github.com/huaweicloud-mate/huaweicloud-devkit",
+                      "brandColor":  "#C7000B",
+                      "defaultPrompt":  [
+                                            "Help me choose the right Huawei Cloud capability.",
+                                            "Check my Huawei Cloud CLI setup safely.",
+                                            "Plan this Huawei Cloud API or SDK task."
+                                        ]
+                  },
+    "mcpServers":  "./.mcp.json",
+    "description":  "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
+    "skills":  "./skills/",
+    "version":  "0.1.23",
+    "author":  {
+                   "name":  "HuaweiCloud Mate",
+                   "url":  "https://github.com/huaweicloud-mate"
+               },
+    "hooks":  "./hooks/",
+    "name":  "huaweicloud-core",
+    "homepage":  "https://github.com/huaweicloud-mate/huaweicloud-devkit",
+    "repository":  "https://github.com/huaweicloud-mate/huaweicloud-devkit",
+    "license":  "Apache-2.0",
+    "keywords":  [
+                     "huaweicloud",
+                     "huawei-cloud",
+                     "koocli",
+                     "hcloud",
+                     "agent",
+                     "mcp",
+                     "api",
+                     "sdk",
+                     "skills"
+                 ]
+}

package/plugins/huaweicloud-core/.mcp.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "mcpServers": {
-    "huaweicloud": {
+    "huaweicloud-devkit": {
       "command": "node",
       "args": [
         "./src/mcp-server.mjs"

package/plugins/huaweicloud-core/hooks/huaweicloud-safety.py CHANGED Viewed

@@ -14,8 +14,10 @@ plugin hooks.
 import json
 import re
 import sys
+from pathlib import Path
 DENY_PREFIX = "Huawei Cloud safety hook blocked this action: "
+RULES_PATH = Path(__file__).resolve().parents[1] / "safety" / "rules" / "cloud-risk-rules.json"
 CONFIG_FILE_RE = re.compile(r"(\.hcloud|\.huaweicloud|hcloud[/\\](config|credentials)|huaweicloud[/\\](config|credentials))", re.I)
 ENV_DUMP_RE = re.compile(r"(env|printenv|Get-ChildItem\s+Env:|gci\s+Env:|dir\s+Env:).*(HUAWEICLOUD|HWC_|HCLOUD|OS_)", re.I)
@@ -63,6 +65,49 @@ def command_text(tool_input):
     return json.dumps(tool_input)
+def load_cloud_risk_rules():
+    try:
+        with RULES_PATH.open("r", encoding="utf-8") as file_obj:
+            catalog = json.load(file_obj)
+        return catalog.get("rules", [])
+    except Exception:
+        return []
+def condition_matches(condition, text):
+    return re.search(condition.get("regex", r"a^"), text, re.I | re.M | re.S) is not None
+def rule_matches(rule, text):
+    match = rule.get("match") or {}
+    all_conditions = match.get("all")
+    any_conditions = match.get("any")
+    none_conditions = match.get("none")
+    if isinstance(all_conditions, list):
+        for condition in all_conditions:
+            if not condition_matches(condition, text):
+                return False
+    if isinstance(any_conditions, list):
+        if not any(condition_matches(condition, text) for condition in any_conditions):
+            return False
+    if isinstance(none_conditions, list):
+        if any(condition_matches(condition, text) for condition in none_conditions):
+            return False
+    return isinstance(all_conditions, list) or isinstance(any_conditions, list)
+def first_denied_command_rule(text):
+    for rule in load_cloud_risk_rules():
+        if "command" not in rule.get("stages", []):
+            continue
+        if rule.get("severity") != "deny":
+            continue
+        if rule_matches(rule, text):
+            return rule
+    return None
 def main():
     try:
         data = json.load(sys.stdin)
@@ -78,6 +123,9 @@ def main():
         deny("dumping cloud credential environment variables is not allowed.")
     if SECRET_READ_RE.search(text):
         deny("direct secret value retrieval would put plaintext secrets into the agent context.")
+    denied_rule = first_denied_command_rule(text)
+    if denied_rule:
+        deny(f"{denied_rule.get('message')} Remediation: {denied_rule.get('remediation')}")
     if tool_name == "Bash" and HCLOUD_RE.search(text) and WRITE_OPERATION_RE.search(text) and not READ_OPERATION_RE.search(text):
         deny("unapproved Huawei Cloud write operations must be planned first and explicitly approved by the user.")

package/plugins/huaweicloud-core/safety/rules/cloud-risk-rules.json ADDED Viewed

@@ -0,0 +1,178 @@
+{
+  "version": "0.1.0",
+  "rules": [
+    {
+      "id": "hwc-command-credential-file",
+      "title": "Credential file read",
+      "category": "credential",
+      "severity": "deny",
+      "stages": ["command"],
+      "match": {
+        "any": [
+          { "field": "text", "regex": "(^|\\s)(cat|type|Get-Content|gc|less|more)\\s+[^\\n]*(\\.hcloud|\\.huaweicloud)" },
+          { "field": "text", "regex": "(hcloud|huaweicloud)[/\\\\](config|credentials)" }
+        ]
+      },
+      "message": "The command may read local Huawei Cloud credential or profile files into the agent context.",
+      "remediation": "Use huaweicloud_show_profile_redacted or user-side credential configuration instead of reading credential files."
+    },
+    {
+      "id": "hwc-command-env-dump",
+      "title": "Cloud credential environment dump",
+      "category": "credential",
+      "severity": "deny",
+      "stages": ["command"],
+      "match": {
+        "all": [
+          { "field": "text", "regex": "(^|\\s)(env|printenv|Get-ChildItem\\s+Env:|gci\\s+Env:|dir\\s+Env:)" },
+          { "field": "text", "regex": "(HUAWEICLOUD|HWC_|HCLOUD|OS_)" }
+        ]
+      },
+      "message": "The command may print cloud credential environment variables.",
+      "remediation": "Inspect only required non-secret settings and redact secret-like values before returning output."
+    },
+    {
+      "id": "hwc-command-secret-value-read",
+      "title": "Plaintext secret read",
+      "category": "secret",
+      "severity": "deny",
+      "stages": ["command"],
+      "match": {
+        "any": [
+          { "field": "text", "regex": "(ShowSecretVersion|DownloadSecret|GetSecretValue)" },
+          { "field": "text", "regex": "(secret_string|secret_binary|secretString|secretBinary)" }
+        ]
+      },
+      "message": "The command appears to retrieve plaintext secret values.",
+      "remediation": "Use runtime secret references, user-side inspection, or redacted metadata checks instead of returning secret values to the agent."
+    },
+    {
+      "id": "hwc-command-encoded-shell-exec",
+      "title": "Encoded payload piped to shell",
+      "category": "execution",
+      "severity": "deny",
+      "stages": ["command"],
+      "match": {
+        "all": [
+          { "field": "text", "regex": "(base64\\s+(-d|--decode)|xxd\\s+-r|certutil\\s+-decode|FromBase64String|hex\\s*decode)" },
+          { "field": "text", "regex": "(\\||;|&&)" },
+          { "field": "text", "regex": "\\b(bash|sh|zsh|powershell|pwsh|cmd|python|node)\\b" }
+        ]
+      },
+      "message": "The command decodes an encoded payload and pipes it into an interpreter.",
+      "remediation": "Decode payloads into a reviewable file first, inspect the content, then execute only explicit reviewed commands."
+    },
+    {
+      "id": "hwc-network-public-admin-port",
+      "title": "Public admin port exposure",
+      "category": "public_exposure",
+      "severity": "deny",
+      "stages": ["command", "artifact", "deploy_plan"],
+      "match": {
+        "all": [
+          { "field": "text", "regex": "(0\\.0\\.0\\.0\\s*/\\s*0|::\\s*/\\s*0|remote_ip_prefix\\s*[=:]\\s*0\\.0\\.0\\.0\\s*/\\s*0|cidr\\s*[=:]\\s*0\\.0\\.0\\.0\\s*/\\s*0)" },
+          { "field": "text", "regex": "(port_range_min|port_range_max|from_port|to_port|port|\\b22\\b|\\b3389\\b|\\b3306\\b|\\b5432\\b|\\b6379\\b|\\b9200\\b)" }
+        ]
+      },
+      "message": "The change appears to expose an administrative or database port to the public internet.",
+      "remediation": "Restrict the source CIDR to a trusted range, use a bastion or VPN, and keep public preview endpoints behind authenticated HTTP services."
+    },
+    {
+      "id": "hwc-obs-anonymous-write",
+      "title": "OBS anonymous write",
+      "category": "public_exposure",
+      "severity": "deny",
+      "stages": ["command", "artifact", "deploy_plan"],
+      "match": {
+        "all": [
+          { "field": "text", "regex": "(OBS|obs://|bucket|object|Statement|Principal)" }
+        ],
+        "any": [
+          { "field": "text", "regex": "((Anonymous|Everyone|\\\"Principal\\\"\\s*:\\s*\\\"\\*\\\"|AllUsers).*(PutObject|DeleteObject|PutBucketPolicy|FULL_CONTROL|WRITE|obs:object:PutObject|obs:bucket:PutBucketPolicy)|(PutObject|DeleteObject|PutBucketPolicy|FULL_CONTROL|WRITE|obs:object:PutObject|obs:bucket:PutBucketPolicy).*(Anonymous|Everyone|\\\"Principal\\\"\\s*:\\s*\\\"\\*\\\"|AllUsers))" },
+          { "field": "text", "regex": "(-acl\\s*=?\\s*public-read-write|acl\\s*[=:]\\s*[\\\"']?public-read-write|public-write)" }
+        ]
+      },
+      "message": "The change may grant anonymous write or full-control access to OBS data.",
+      "remediation": "Use private buckets by default. Grant object read only when required, and avoid anonymous write permissions."
+    },
+    {
+      "id": "hwc-functiongraph-public-no-auth",
+      "title": "Public FunctionGraph trigger without auth",
+      "category": "public_exposure",
+      "severity": "warn",
+      "stages": ["command", "artifact", "deploy_plan"],
+      "match": {
+        "all": [
+          { "field": "text", "regex": "(FunctionGraph|APIG|CreateTrigger|CreateApi|DEDICATEDGATEWAY|API Gateway)" },
+          { "field": "text", "regex": "(public|PUBLIC|0\\.0\\.0\\.0\\s*/\\s*0|auth[\\\"']?\\s*[=:]\\s*[\\\"']?(NONE|none|false)|security_authentication[\\\"']?\\s*[=:]\\s*[\\\"']?(NONE|none))" }
+        ]
+      },
+      "message": "The generated FunctionGraph or API Gateway path may be publicly reachable without authentication.",
+      "remediation": "Require IAM, app authentication, JWT, or another explicit auth layer before exposing generated application endpoints."
+    },
+    {
+      "id": "hwc-iam-admin-policy",
+      "title": "Broad IAM administrator grant",
+      "category": "iam",
+      "severity": "deny",
+      "stages": ["command", "artifact", "deploy_plan"],
+      "match": {
+        "all": [
+          { "field": "text", "regex": "(IAM|policy|role|agency|Statement|Action)" },
+          { "field": "text", "regex": "(\\\"Action\\\"\\s*:\\s*(\\\"(\\*|\\*:\\*)\\\"|\\[\\s*\\\"(\\*|\\*:\\*)\\\")|Action\\s*[=:]\\s*(\\*|\\*:\\*)|AdministratorAccess|FullAccess)" },
+          { "field": "text", "regex": "(\\\"Effect\\\"\\s*:\\s*\\\"Allow\\\"|Effect\\s*[=:]\\s*Allow)" }
+        ]
+      },
+      "message": "The change appears to grant broad administrator permissions.",
+      "remediation": "Use least-privilege service actions, resource constraints, and short-lived credentials for generated application workflows."
+    },
+    {
+      "id": "hwc-destructive-delete-force",
+      "title": "Forced destructive operation",
+      "category": "destructive",
+      "severity": "deny",
+      "stages": ["command"],
+      "match": {
+        "all": [
+          { "field": "text", "regex": "(Delete|BatchDelete|Remove|\\brm\\b|delete)" },
+          { "field": "text", "regex": "(--force|-f|--recursive|-r|delete_publicip\\s*[=:]\\s*true)" }
+        ]
+      },
+      "message": "The command combines deletion with force, recursive, or cascading deletion behavior.",
+      "remediation": "Show the exact resources to be deleted, confirm backups or recovery path, and require explicit user approval for the exact command."
+    },
+    {
+      "id": "hwc-sandbox-missing-ttl",
+      "title": "Sandbox deployment missing cleanup metadata",
+      "category": "sandbox",
+      "severity": "warn",
+      "stages": ["artifact", "deploy_plan"],
+      "match": {
+        "all": [
+          { "field": "text", "regex": "(sandbox|preview|temporary|ephemeral|dev environment|FunctionGraph|ECS|CCE|APIG)" },
+          { "field": "text", "regex": "(Create|Deploy|Provision|resource|stack|environment)" }
+        ],
+        "none": [
+          { "field": "text", "regex": "(ttl|expires_at|expire_at|cleanup|owner|cost_center|auto_delete|auto-delete)" }
+        ]
+      },
+      "message": "The preview or sandbox deployment does not show cleanup or ownership metadata.",
+      "remediation": "Add owner, purpose, expiration time, and cleanup command before creating preview cloud resources."
+    },
+    {
+      "id": "hwc-cost-unbounded-scale",
+      "title": "Unbounded scale or high-cost resource",
+      "category": "cost",
+      "severity": "warn",
+      "stages": ["command", "artifact", "deploy_plan"],
+      "match": {
+        "any": [
+          { "field": "text", "regex": "(max_instances|max_node_count|max_replica|desired\\s*[=:]\\s*[5-9][0-9]|replicas\\s*[=:]\\s*[5-9][0-9])" },
+          { "field": "text", "regex": "(GPU|gpu|large|xlarge|charging_mode\\s*[=:]\\s*prePaid|period_type|period_num)" }
+        ]
+      },
+      "message": "The generated plan may create high-cost or unbounded capacity.",
+      "remediation": "Use small preview defaults, explicit quotas, budget labels, and user approval before creating high-cost resources."
+    }
+  ]
+}

package/plugins/huaweicloud-core/skills/huawei-cloud-find-skills/SKILL.md CHANGED Viewed

@@ -12,7 +12,7 @@ description: |
 # Huawei Cloud Agent Skills Search and Discovery
-This skill enables users to efficiently search, discover, and install Huawei Cloud skills.
+This skill enables users to efficiently search, discover, and install Huawei Cloud skills.
 ## Scenario Description

package/plugins/huaweicloud-core/skills/huawei-dds-dcs/SKILL.md CHANGED Viewed

@@ -12,7 +12,7 @@ Always run `hcloud DDS <Operation> --help` or `hcloud DCS <Operation> --help` be
 ## DDS (Document Database Service — MongoDB Compatible)
-## DDS Critical Warnings
+## Critical Warnings
 | Trap | Why |
 |------|-----|
@@ -35,7 +35,7 @@ Discover exact parameters with `--help` before executing any command.
 ## DCS (Distributed Cache Service — Redis/Memcached)
-## DCS Critical Warnings
+## Critical Warnings
 | Trap | Why |
 |------|-----|

package/plugins/huaweicloud-core/skills/huawei-ecs/SKILL.md CHANGED Viewed

@@ -84,6 +84,7 @@ Abort if the result set is larger than `--limit` and ask the user to narrow the
 | Insufficient resources | Stock depleted -> Change flavor or AZ |
 | AuthFailure | Expired AK/SK -> hcloud configure init |
 | APIGW.0802 / region permission | IAM user has no access to this region -> IAM console → User → Permissions → add region, or switch to another region |
+| Cannot SSH (port 22 open) | SCP policy may be blocking SSH. Check `SYS.0403` errors in command output -> Use cloud-init/user_data for initial setup instead. See `references/create-instance.md` §Bootstrap |
 ## Security Considerations
@@ -98,9 +99,12 @@ Prefer these tools over raw hcloud CLI — they enforce safety policies:
 - huaweicloud_list_operations service=ECS
 - huaweicloud_run_readonly_command for discovery (auto-redacts output)
+- huaweicloud_plan_cli_command for command planning (returns command text + safety classification)
 - huaweicloud_run_approved_command for writes (requires exact command approval)
 - huaweicloud_check_cli to verify hcloud is available
+> **approvedCommand trap**: `huaweicloud_run_approved_command` validates that `approvedCommand` matches the planned command EXACTLY (including `<redacted>` placeholders). Always use the `command` field value returned by `huaweicloud_plan_cli_command` verbatim — never reconstruct or retype it. Mismatches cause rejection with "approvedCommand must exactly match the planned hcloud command."
 ## Without MCP (Fallback)
 If MCP tools are NOT available (new install, session not restarted):