What does the Huaweicloud Cli And Auth AI skill do?

Safe Huawei Cloud KooCLI usage and authentication guidance. Use when working with hcloud, KooCLI, profiles, AK/SK, regions, projects, endpoints, CLI output, credential errors, or local Huawei Cloud account context.

Why use Huaweicloud Cli And Auth on TypingMind?

Because you install it once and use it with any model. Huaweicloud Cli And Auth is plain Markdown rather than provider-specific code, so the same skill runs on GPT-5, Claude, Gemini, Grok, or a local model — and you can switch model mid-chat without it breaking. TypingMind runs on your own API keys, so you pay providers directly instead of a per-seat subscription, and your skills and chats stay in your own storage.

How do I install Huaweicloud Cli And Auth in TypingMind?

Open Plugins → Skills → Install from GitHub in TypingMind and paste https://github.com/huaweicloud/huaweicloud-devkit/tree/main/plugins/huaweicloud-core/skills/huaweicloud-cli-and-auth. TypingMind reads its SKILL.md and bundles its files and installs it as a skill you can enable per chat.

Which AI models can use Huaweicloud Cli And Auth?

Any model you connect in TypingMind. AI skills are plain Markdown instructions rather than provider-specific code, so GPT, Claude, Gemini, Grok, and local models can all load this skill when a request matches it.

How many AI models can I use with Huaweicloud Cli And Auth?

As many as you like. As long as a model supports skills, you can use Huaweicloud Cli And Auth with it — GPT, Claude, Gemini, Grok, DeepSeek, Mistral, Llama and more — all on TypingMind with your own API keys.

Is the Huaweicloud Cli And Auth AI skill free?

Yes. It is published on GitHub by huaweicloud under the Apache-2.0 license. You only pay your own AI provider for the tokens you use.

An AI skill is a reusable instruction bundle that teaches an AI model how to do one specific task. It follows the open Agent Skills format: a SKILL.md file with a name and description, plus any scripts, templates or reference files the model may need. The model reads the instructions only when your request matches the skill, so an installed skill costs nothing until it is used.

How are AI skills different from plugins or MCP servers?

A plugin or MCP server gives a model new tools to call — code that runs somewhere and returns a result. An AI skill gives the model knowledge and process instead: how to approach a task, which steps to follow, what good output looks like. Skills are plain Markdown, so they need no server, no API key and no runtime, and they work with any model.

Huaweicloud Cli And Auth by huaweicloud — AI Skill for Any LLM

Huawei Cloud CLI And Auth

STOP - Do not answer from general knowledge. Follow the procedure below.

Use KooCLI hcloud for local inspection and reviewed operations. Never ask the user to paste AK/SK, SK, tokens, passwords, or credential files into chat.

Install KooCLI

Official guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003.html.

Version pairing: this plugin is paired with KooCLI v7.3.12 (kooCliVersion in package.json). Prefer the pinned download below. The one-liner script hcloud_install.sh always installs the latest version and cannot be pinned — if you use it, check_cli/doctor will warn when the installed version does not match v7.3.12.

Windows

Download and unzip: https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.3.12/huaweicloud-cli-windows-amd64.zip
Extract to %USERPROFILE%\hcloud, add to user PATH
Verify: hcloud version

Linux (amd64 / arm64)

Fixed download (recommended):

bash
# amd64
curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.3.12/huaweicloud-cli-linux-amd64.tar.gz"
tar -zxvf huaweicloud-cli-linux-amd64.tar.gz
# arm64
curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.3.12/huaweicloud-cli-linux-arm64.tar.gz"
tar -zxvf huaweicloud-cli-linux-arm64.tar.gz

Move to PATH: mv $(pwd)/hcloud ~/.local/bin/ Verify: hcloud version

One-liner (installs latest, may drift from v7.2.12):

bash
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y

macOS (amd64 / arm64)

Fixed download (recommended):

bash
# amd64
curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.3.12/huaweicloud-cli-mac-amd64.tar.gz"
tar -zxvf huaweicloud-cli-mac-amd64.tar.gz
# arm64 (Apple Silicon)
curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.3.12/huaweicloud-cli-mac-arm64.tar.gz"
tar -zxvf huaweicloud-cli-mac-arm64.tar.gz

Move to PATH: mv $(pwd)/hcloud /usr/local/bin/ Verify: hcloud version

One-liner (installs latest, may drift from v7.2.12):

bash
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y

No restart needed after install: DevKit locates hcloud dynamically on every call — it checks HCLOUD_BIN, then the fixed install dirs (~/.local/bin/hcloud on Linux, /usr/local/bin/hcloud on macOS, ~/hcloud/hcloud.exe on Windows), then PATH. Once install-hcloud or the background auto-install writes the binary to one of those dirs, the very next check_cli / run_* call uses it. Do not tell users to restart the agent.

Agent processes find executables through PATH; HCLOUD_BIN overrides it. DevKit re-locates hcloud from its fixed install dirs on every call, so a freshly installed binary (~/.local/bin on Linux, /usr/local/bin on macOS, ~/hcloud on Windows) or a re-set HCLOUD_BIN is picked up by the next check_cli / run_* call without restarting the agent. A custom PATH entry is only honored via HCLOUD_BIN or the PATH locator fallback, and shell PATH changes take effect only for processes started after the update.

Configure Credentials Outside Chat

NEVER let AK/SK enter shell history. This is the #1 credential leak vector.

Create AK/SK in the Huawei Cloud console under My Credentials -> Access Keys.
Configure credentials ONLY via npx huaweicloud-devkit auth init — the single entry point. It writes the unified ~/.config/huaweicloud/credentials.json and mirrors it to KooCLI (~/.hcloud/config.json) and OBS (~/.obsutilconfig), without AK/SK entering shell history.
Never configure KooCLI on its own: do not ask the user to run hcloud configure init or hcloud configure set --cli-access-key=... --cli-secret-key=... --cli-region=... (AK/SK would leak into shell history). If KooCLI lacks credentials, tell the user to run npx huaweicloud-devkit auth init.
If MCP is available, use huaweicloud_show_profile_redacted to check status without ever seeing credentials.
Never paste AK/SK, passwords, tokens, or profile files into the agent conversation.
KooCLI stores credentials in ~/.hcloud/config.json, NOT environment variables. HCLOUD_ACCESS_KEY / HCLOUD_SECRET_KEY / HCLOUD_REGION env vars are NOT read by KooCLI 7.x.

Safe Flow

Check whether hcloud is installed.
KooCLI first-run privacy agreement: On a fresh KooCLI install, hcloud blocks with 同意并继续使用(y)/不同意并退出(N) and fails with [USE_ERROR]您输入的是无效字符 in non-interactive mode. Detection: check command output for these strings. Ask the user: "KooCLI needs to accept its privacy agreement. May I accept it on your behalf?" If the user agrees, run huaweicloud_run_readonly_command with args=["version"] and stdin="y\n". This accepts the agreement once, after which hcloud works normally.
Ask the user to configure credentials outside the agent conversation when setup is needed.
Inspect profile and region only through redacted tooling.
Always discover exact operation names and parameters with --help BEFORE constructing the command. Never guess from general knowledge — parameter names change across API versions. The discovery chain is:
1. hcloud --help → available services
2. hcloud <Service> --help → operations (use huaweicloud_list_operations or step 2/3 directly)
3. hcloud <Service> <Operation> --help → exact parameter names, required flags, and value formats
4. Execute only after the help text confirms the operation and its parameters
- Service skills may skip steps 1-2 when they already provide the correct service and operation names, but step 3 (<Operation> --help) is never skippable before planning a write operation or a command with parameters.
- Example: ECS instance listing is commonly ECS ListServersDetails; ECS creation is commonly ECS CreateServers; image lookup may be under IMS GlanceShowImage.
Use --cli-output=json for machine-readable responses when supported.
For resource operations, include --cli-region, --cli-profile, and service-specific project information when required.
Classify every command before running it:
- Read-only: List*, Show*, Get*, Describe*.
- Write: Create*, Delete*, Update*, Resize*, Start*, Stop*, Authorize*, and similar.
- Secret: any operation returning secret string, binary secret, token, or password.
For write operations, show the exact command and ask for explicit approval.

KooCLI Syntax Notes

Prefer --param=value; KooCLI 7.x may reject some space-separated parameter forms.
Array-style parameters use 1-based indexes, for example --server.nics.1.subnet_id=<subnet-id>, not .0.
For ECS creation, first inspect help: hcloud ECS CreateServers --help.
Minimal create shape to refine after help lookup:

bash
hcloud ECS CreateServers --cli-region=<region> --server.name=<name> --server.flavorRef=<flavor-id> --server.imageRef=<image-id> --server.nics.1.subnet_id=<subnet-id> --server.root_volume.volumetype=<type>

If a command needs an adminPass or other password field, do not leave plaintext secrets in shell history. Prefer local-only input or runtime injection.

Language / Service Catalog Trap

KooCLI loads the service list from a per-language catalog: ~/.hcloud/metaRepo/services_{cn,en}.json. The English catalog is incomplete (149 services vs 220 in Chinese; ~70 services — BSS, DevStar, CloudTable, FRS, ASM, ... — are missing). A command against a service that only exists in the Chinese catalog fails with a misleading Unsupported service: X.
KooCLI has no per-command --cli-lang flag — appending --cli-lang=cn is rejected as 不正确的参数:cli-lang. The language switch is global only: hcloud configure set --cli-lang=cn (changes ALL CLI output language).
huaweicloud-devkit detects Unsupported service: X and, when the cause is the en-catalog gap, returns an actionable hint to run hcloud configure set --cli-lang=cn (or to check the service name / refresh metadata for genuinely unknown services). It never mutates your command.
Distinguish from region metadata limits (e.g., BSS only supports cn-north-1): a region error is NOT solved by switching language.

Output Formatting

bash
# JSON format (recommended for Agent)
hcloud <Service> <Op> --cli-output=json

# Table format (manual viewing)
hcloud <Service> <Op> --cli-output=table

# JMESPath filtering (extract specific fields)
hcloud <Service> <ListOp> --cli-output=json --cli-query "items[?status=='ACTIVE'].{ID:id,Name:name}"

# Debug mode (when commands fail)
hcloud <Service> <Op> --cli-debug=true

Credential Resolution Priority

Credentials are resolved in this order (highest priority first):

Priority	Source	When active	Persistence
1	Runtime (session) credentials	`huaweicloud_auth_init` / `huaweicloud_auth_switch action=temporary` set them	Memory (MCP restart clears)
2	S1 global file with `configuredBySession: true`	set by `huaweicloud_auth_switch action=persist` (session-configured account wins over env)	Permanent (S1)
3	Environment variables	`HW_ACCESS_KEY` / `HW_SECRET_KEY` (platform/devspace-injected default account)	MCP process lifetime
4	CodeArts / CodeArts Work	`.codeartsdoer/mcp/mcp_settings.json` / `.codeartswork/mcp/mcp_settings.json`	File
5	S1 global file (no session flag)	`auth init` permanent credentials	Permanent (S1)
6	KooCLI profile	`~/.hcloud/config.json` (KooCLI commands only)	Permanent

When switching accounts within the same Agent session, use huaweicloud_auth_init to set runtime credentials (overrides all sources for the current MCP process), or huaweicloud_auth_switch action=persist, which writes S1 with configuredBySession: true so the session-configured account outranks HW_ACCESS_KEY / HW_SECRET_KEY. Note: running auth init clears the configuredBySession flag.

Global Services & domain-id

KooCLI resolves the account/domain-id automatically from a valid AK/SK, so global services (BSS, IAM, CDN) normally do not need an explicit --cli-domain-id.

If a command fails with [USE_ERROR]...缺少必填参数 cli-domain-id, the real cause is almost always invalid or expired credentials (APIGW.0301 Incorrect IAM authentication information): KooCLI's internal account-id lookup failed and it misreports that as a missing domain-id. Fix the credentials instead (npx huaweicloud-devkit auth init).

Some IAM operations take a genuine business parameter for the account-id (e.g. --domain_id, --agency.domain_id, --agency.trust_domain_id, --agency_urn). Discover those with --help; get the account-id value with:

bash
hcloud STS GetCallerIdentity --cli-region=<region>   # account_id = the account/domain-id

<region> is the profile's current region. STS is not deployed in cn-north-1 — use another region if needed.
Temporary credentials (AK/SK + security token) work too: add --cli-security-token=<token>.

Preferred Toolkit Tools

huaweicloud_auth_init
huaweicloud_auth_status
huaweicloud_check_cli
huaweicloud_show_profile_redacted
huaweicloud_plan_cli_command
huaweicloud_run_readonly_command
huaweicloud_list_operations
huaweicloud_run_approved_command

Do Not Run Directly

Raw hcloud configure show/list/get/export in agent tools.
Commands reading .hcloud or .huaweicloud files.
Commands dumping cloud credential environment variables.
Secret value reads such as CSMS ShowSecretVersion.

Publisher	huaweicloud
Repository	`huaweicloud-devkit`
Skill name	`huaweicloud-cli-and-auth`
Stars	70
Forks	12
Bundled files	1
License	Apache-2.0
Links	Skill source Repository

Huaweicloud Cli And Auth

Overview

Installation

Install in TypingMind

Install in another agent

Use it in TypingMind

Works with any AI model

Skill instructions

Huawei Cloud CLI And Auth

Install KooCLI

Windows

Linux (amd64 / arm64)

macOS (amd64 / arm64)

Configure Credentials Outside Chat

Safe Flow

KooCLI Syntax Notes

Language / Service Catalog Trap

Output Formatting

Credential Resolution Priority

Global Services & domain-id

Preferred Toolkit Tools

Do Not Run Directly

Bundled files

Frequently asked questions

Set up your own AI workspace now

Overview

Installation

Install in TypingMind

Install in another agent

Use it in TypingMind

Works with any AI model

Skill instructions

Huawei Cloud CLI And Auth

Install KooCLI

Windows

Linux (amd64 / arm64)

macOS (amd64 / arm64)

Configure Credentials Outside Chat

Safe Flow

KooCLI Syntax Notes

Language / Service Catalog Trap

Output Formatting

Credential Resolution Priority

Global Services & domain-id

Preferred Toolkit Tools

Do Not Run Directly

Bundled files

Frequently asked questions

Related AI Skills

Set up your own AI workspace now