Huawei Cloud Terraform Generator Skill: Plan and Apply

• Works out the resources and asks you to confirm the plan

  Infers the architecture from your goal, decides what to create or reuse, and proposes a concrete plan with defaults so you confirm only the decisions that matter.

  Try: “Deploy a public website on Huawei Cloud with Terraform.”

  Read · Plan

• Asks which ports to open before writing rules

  Infers likely ports (80, 443, 22 for a web server), asks you to confirm, and writes rules only for the confirmed ports plus an egress rule.

  Read · Security group ports

• Queries flavors and images in your region first

  Must read the huawei-cloud-computing-query SKILL.md, then query the target region for each flavor and image in the plan. If the query fails, SKILL.md says to stop, not to guess.

  Network · Availability check

• Writes the five required Terraform files

  Writes providers.tf, variables.tf, main.tf, terraform.tfvars and README.md, with no outputs.tf. Passwords are generated at 16 or more characters and put in terraform.tfvars, and you are told what they are.

  Write · Generate the files

• Writes a .tfrc and runs terraform init through the Huawei Cloud mirror

  Creates a .tfrc pointing at https://mirrors.huaweicloud.com/terraform/, sets TF_CLI_CONFIG_FILE on every init, and installs Terraform first if it is not on the PATH.

  Runs code · Mirror setup and init

• Runs fmt, init, validate and plan until plan succeeds

  Runs terraform fmt -recursive, init, validate and plan in order, fixing the configuration and retrying on errors.

  Runs code · Validate

• Shows a cost estimate, then applies after your confirmation

  After plan, shows resources, estimated monthly cost and a pricing calculator link, asks you to confirm in a dialog, runs terraform apply, repairs errors, then checks the deployed resources.

  Runs code · Cost estimate and apply

Watch out for

• Apply creates real resources that cost money

  SKILL.md runs terraform apply after a confirmation dialog and a cost estimate. Read the plan output yourself, use a test project, and remember terraform destroy exists too (SKILL.md also requires confirmation for it). github.com

• Secrets land in terraform.tfvars as plain text

  Generated passwords and the security token go into terraform.tfvars, and the agent tells you the passwords. Keep that file out of git and change the values if you want your own. github.com

• Opened ports use 0.0.0.0/0

  The rule example in SKILL.md uses remote_ip_prefix 0.0.0.0/0 for the ingress rules, and says the rules for 443 and 22 are similar. Narrow the source range if you do not want the world to reach SSH. github.com

• It installs Terraform and downloads the provider

  If Terraform is missing the agent installs it with a native package manager or the official binary. The provider comes only from https://mirrors.huaweicloud.com/terraform/, and SKILL.md says not to fall back to the upstream registry. For password-based remote-exec provisioners, reference/validation-workflow.md also shows apt-get, yum and dnf commands that install sshpass and expect. github.com

• It depends on the computing query skill

  The flavor and image checks run that skill's scripts, which install pip packages and turn off TLS certificate checks. Read its safety notes before you rely on it. github.com

Security advisories