360 Secure SkillHub
360 安全技能中心

huawei-cloud-account-onboarding

核心功能:借助hcloud工具检查华为云账号实名认证状态,未实名时生成人脸验证二维码,等待用户完成验证,全程只读,不执行写操作、不接收敏感信息。典型场景:账号因未实名无法购资源、查询实名状态。需用户自行配置hcloud环境,不支持企业实名等非人脸验证流程。

agenticweb4
agenticweb4
热度 59.58
最近更新 2026-09-15 10:03:00
分类:自动化依赖:代码执行 / 第三方 API应用场景:自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add huawei-cloud-account-onboarding
Metadata
name
huawei-cloud-account-onboarding
description
Checks Huawei Cloud real-name verification status and guides face-scan verification read-only through hcloud. Use for Huawei Cloud verification status, real-name onboarding, or flows blocked on verification. Accepts no identity documents, bank details, or SMS codes; refuses writes and non-Huawei-Cloud identity workflows.
metadata
{"language":"en","translation_of":"huawei-cloud-account-onboarding-cn","version":"1.0.0","openclaw":{"requires":{"bins":["hcloud"]},"primaryEnv":"HUAWEICLOUD_SDK_AK","homepage":"https://github.com/concept-git/cloud-concept-skills/tree/main/skills/en/huawei-cloud-account-onboarding","envVars":[{"name":"HUAWEICLOUD_SDK_AK","required":false},{"name":"HUAWEICLOUD_SDK_SK","required":false}]}}

Huawei Cloud Account Onboarding

Community edition, not an official Huawei Cloud skill. Treat the current hcloud response as authoritative.

Use hcloud 7.2 or later to answer one question read-only: can this account purchase resources now? Confirm when it is already verified; otherwise deliver the face-scan QR code to the account holder and wait for verification to complete.

Three Steps

  1. Check status — Run ShowRealNameAuthStatus first and route by its four states. The QR operation does not enforce this gate and may return a usable code for an already verified account, so the skill must enforce it.
  2. Deliver the QR code — Fetch it only when the account is unverified and the user can scan it now. Render it with scripts/render-qr.ts. The URL is a one-time credential: never persist, forward, or reuse it.
  3. Wait for completion — Poll with the waiter until verified. On timeout, ask before fetching a new code; never resend automatically.

Copy commands, response fields, and values from references/commands.md. Do not discover this flow ad hoc with --help or invent parameters. If no hcloud profile is configured, stop and ask the user to configure it themselves; never accept or write credentials.

Guardrails

  • Read-only — Never submit, change, or revoke verification. Refuse every write operation.
  • No sensitive intake — Refuse identity numbers, document images, bank-card details, and SMS codes, and ask the user to delete them. This flow needs none of them.
  • No impersonation — Do not scan for the user, perform liveness checks for them, or give their QR code to anyone else.
  • Face-scan only — Route enterprise, document, bank-card, verification-change, and review-detail requests to Account Center → Real-Name Authentication. State that general KYC and non-Huawei-Cloud identity flows are out of scope.

References

Entity and four-state model: references/concepts.md · commands and fields: references/commands.md · terminal renderer: scripts/render-qr.ts (npx tsx render-qr.ts <url>; first run requires cd scripts && npm install).