Huawei Cloud Storage Query Skill: Disks, Buckets, Backups

Lets an agent look up Huawei Cloud disks, OBS buckets, file systems and backups through bundled read-only Python scripts.

Installs: 17.5K; on skills.sh
Stars: 59; on GitHub
Files: 60+; besides SKILL.md
Updated: Oct 2026; last repo commit

This is Huawei Cloud's own query skill for storage. The agent runs one of the bundled Python scripts per lookup: EVS cloud disks and snapshots, OBS buckets (ACL, metadata, notifications, policies, objects), SFS Turbo file systems and CBR backup vaults, policies and tasks. SKILL.md says it has no write operations.

Before the first query the agent runs an environment check script. It builds a .venv in the skill folder, installs the Huawei Cloud SDK with pip and tests your keys with an IAM call. You must set HW_ACCESS_KEY and HW_SECRET_KEY first. SKILL.md writes every script call as skill action=exec with skill:// paths, and the README does not say which agent supports that form.

Good for

Cloud engineers checking disks, snapshots and quotas
Teams reviewing OBS bucket ACLs, policies and public access settings
Admins checking backup vaults, policies and tasks

Install huawei-cloud-storage-query

Claude Code

Copy this prompt.

Install the huawei-cloud-storage-query skill in Claude Code. Run this command:

npx skills add huaweicloud/huaweicloud-skills --skill huawei-cloud-storage-query

Then check that it loaded and tell me how to use it.

2
Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

There is no separate install step for the Python side. SKILL.md has the agent run scripts/check_env.sh (scripts/check_env.ps1 on Windows) first, which creates a .venv in the skill folder and pip-installs the Huawei Cloud SDK packages. Set the key variables in your shell before you start the agent. SKILL.md writes every script call as skill action=exec with skill:// paths, and the README does not say which agent supports that form. The repo has no plugin manifest, so there is no plugin route, and there is no Claude app tab because the skill runs local Python.

Built from the package data we hold. Not yet tested by us. Source.

What's in the skill

When it loads

Queries Huawei Cloud storage resources (EVS/OBS/SFS/CBR). Covers cloud disks (volumes/snapshots/types/quotas/recycle bin), OBS buckets (ACL/metadata/notifications/policies/objects), SFS Turbo file systems (shares/perm rules/backend targets/quotas/LDAP/AD), and CBR backups (vaults/policies/backups/tasks/agents/protectables). No write operations. Use this skill when the user needs to query disk info, list buckets/objects, check file system status, or view backup/policy details. Triggers: 云硬盘, EVS, 对象存储, OBS, 文件系统, SFS, 备份, CBR, 存储库, 快照, 桶, volume, bucket, backup, vault.

Sections in SKILL.md

Overview
Capabilities
Usage Principles
Prerequisites
Execution Flow
Step 1: Environment Preparation
Step 2: Identify and Execute Query Script
Directory Structure
Parameter Confirmation
Output Format
Verification Method
Best Practices
Reference Documentation
Notes

Key facts

Author: Huawei Cloud (the skill is in the vendor's own huaweicloud/huaweicloud-skills repo; the README calls these officially maintained Huawei Cloud Agent Skills)
License: MIT (LICENSE file and README badge; the LICENSE copyright line still reads "[year] [fullname]")
Installs on skills.sh: 17,523 (Nov 2, 2026)
skills.sh audits: Gen Agent Trust Hub warn, Socket pass, Snyk warn (Nov 2, 2026)
GitHub stars: 59 for the whole huaweicloud/huaweicloud-skills repo (Nov 2, 2026)
Last repo commit: Oct 31, 2026
What it includes: 96 files including SKILL.md (counted from the repo tree): 88 Python files, 5 Markdown files, check_env.sh, check_env.ps1 and requirements.txt. The Python files are 86 query scripts in 5 folders (cbr 33, sfs 22, evs 16, obs 14, iam 1) plus config.py and ensure_env.py.
Needs: Python 3.6 or newer, plus HW_ACCESS_KEY and HW_SECRET_KEY in the environment (SKILL.md)
Works in: The README names no client; it says the skills are "compatible with mainstream AI Agents"

What it includes

Builds the Python environment and tests your keys before any query
Runs scripts/check_env.sh (or check_env.ps1 on Windows). It checks Python, installs the SDK packages into a .venv, imports them and makes an IAM call to confirm the key works.
Try: “Check my Huawei Cloud setup, then list my cloud disks.”
Runs code · Environment check
16 scripts for disks, snapshots, types, quotas and the recycle bin
Reads EVS cloud disks, snapshots, disk types, quotas and the recycle bin.
Try: “List my cloud disks and which ones have snapshots.”
Network · EVS queries
14 scripts for buckets, ACLs, policies, metadata and objects
Lists buckets and objects and reads bucket ACL, metadata, notification, object lock and public access settings. The guide also lists a get_object.py script described as "Get object content".
Try: “Which of my buckets allow public access?”
Network · OBS queries
22 scripts for file systems, permission rules and quotas
Reads SFS Turbo file systems, shares, permission rules, backend targets, quotas and LDAP/AD settings.
Try: “Show my SFS Turbo file systems and their permission rules.”
Network · SFS Turbo queries
33 scripts for backup vaults, policies, backups and tasks
Reads Cloud Backup and Recovery vaults, policies, backups, tasks, agents and protectable resources.
Try: “List my backup vaults and the policies on them.”
Network · CBR queries
Finds the project ID for a region
One script in scripts/iam asks IAM for the project that matches a region.
Network · Project ID lookup

From the official docs

Permissions

Medium risk

Your cloud key is used by scripts that run on your machine and talk to Huawei Cloud, and TLS certificate checks are turned off. Use a key that can only read, on a network you trust.

What it can do

Read your data
Create and change things
Delete things
Read-only mode

Watch out for

It turns off TLS certificate checks
scripts/config.py sets ignore_ssl_verification = True for the Huawei Cloud SDK, and scripts/ensure_env.py switches Python to an unverified HTTPS context. Use it only on a network you trust. github.com
Its setup script installs packages with pip
ensure_env.py creates a .venv in the skill folder and runs pip install -r requirements.txt, trying repo.huaweicloud.com, pypi.tuna.tsinghua.edu.cn and mirrors.aliyun.com with --trusted-host before plain PyPI. If pip is missing it can fetch get-pip.py from mirrors.huaweicloud.com or bootstrap.pypa.io. github.com
It uses your cloud keys and calls IAM to test them
The scripts read the HW_ACCESS_KEY and HW_SECRET_KEY environment variables. The environment check makes a live IAM call to confirm they work. Use a key that can only read. github.com
Object content can reach the chat
The OBS guide lists a get_object.py script with the purpose "Get object content". Name the object you want, and avoid buckets that hold sensitive files. github.com

Security advisories

No published security advisories as of Nov 2, 2026.

Technical details

Turning on read-only	SKILL.md says this is a read-only query skill. There is no switch to enforce it.
Talks to	Huawei Cloud API endpoints through the Huawei Cloud Python SDK. repo.huaweicloud.com, pypi.tuna.tsinghua.edu.cn, mirrors.aliyun.com and PyPI during the pip install. mirrors.huaweicloud.com and bootstrap.pypa.io if pip must be bootstrapped
Sign-in and keys	The scripts read the key from environment variables. SKILL.md says not to print the values.
Scopes	Reads HW_ACCESS_KEY, HW_SECRET_KEY, HW_REGION_NAME, HW_PROJECT_ID and HW_SECURITY_TOKEN from your environment Calls Huawei Cloud APIs to look up disks, buckets, objects, file systems and backups Writes a .venv folder inside the skill folder

Questions

What does huawei-cloud-storage-query do?

It makes an agent look up Huawei Cloud storage data by running bundled read-only Python scripts. It covers EVS disks, OBS buckets and objects, SFS Turbo file systems and CBR backups. The OBS guide lists a get_object.py script with the purpose "Get object content". Run it only against buckets you are happy to put in the chat, and tell the agent which objects you want.

Does the storage query skill need an API key?

Yes. SKILL.md lists HW_ACCESS_KEY and HW_SECRET_KEY as required, HW_REGION_NAME as optional with a default of cn-north-4, and HW_SECURITY_TOKEN for temporary keys. Our advice: use an IAM user that can only read, since the skill only queries.

Is huawei-cloud-storage-query official?

It is in Huawei Cloud's own huaweicloud/huaweicloud-skills repo, which the README calls officially maintained Huawei Cloud Agent Skills.

Is the storage query skill safe to run?

It runs Python scripts on your machine with your cloud key, and SKILL.md says it only queries. Its setup also installs packages with pip and turns off TLS certificate checks. See the safety box for the details, and use a read-only key.

Does the storage query skill work in Claude Code, Codex or the Claude app?

The install box has Claude Code, Codex and standalone tabs. Huawei says only that the skills are compatible with mainstream AI Agents and names none. SKILL.md tells the agent to run scripts with a skill action=exec call and skill:// paths, and Huawei does not say which agents support that call, so check that yours does. There is no Claude app tab because the skill runs local Python.

How is it different from the OBS upload, stats and bucket create skills?

This one only looks things up across EVS, OBS, SFS and CBR, using Python SDK scripts. The OBS upload, OBS stats and OBS bucket create skills drive the hcloud and obsutil command-line tools for one job each.

Information

updated Nov 2, 2026

Repository: huaweicloud/huaweicloud-skills
Folder: skills/storage/obs/huawei-cloud-storage-query

huaweicloud/huaweicloud-skills skills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 7

huawei-cloud-storage-query SKILL.md · github.com
huaweicloud-skills README · github.com
huaweicloud-skills LICENSE · github.com
huawei-cloud-storage-query ensure_env.py · github.com
huawei-cloud-storage-query config.py · github.com
huawei-cloud-storage-query requirements.txt · github.com
OBS query guide · github.com