tencent-cloudq

What This Skill Does

The tencent-cloudq skill is an advanced AI agent integration designed to interact with Tencent Cloud's Smart Advisor service. By utilizing secure AK/SK authentication, this agent allows users to manage and audit their cloud infrastructure directly through natural language queries. It serves as a comprehensive bridge between the user and the Tencent Cloud ecosystem, enabling tasks such as retrieving architectural diagrams, reviewing infrastructure documentation, and performing in-depth risk assessments. Whether you are a cloud architect needing a snapshot of your current deployment or a DevOps engineer looking to identify security vulnerabilities or misconfigurations across products, this skill provides a structured and secure interface to execute these diagnostic operations.

Installation

To integrate this skill into your OpenClaw environment, ensure you have the necessary permissions and environment access. Run the following command in your terminal:

clawhub install openclaw/skills/skills/1ncludesteven/tencent-tsa-cloudq

Once installed, you must perform a one-time configuration of your Tencent Cloud credentials. You will need to export TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY into your system shell configuration. Before proceeding with any cloud operations, run the environment check script provided in the package via python3 {baseDir}/check_env.py to ensure your authentication and role permissions are correctly established. For automated console access, you may be prompted to approve the creation of a restricted CAM role to facilitate secure, delegated authorization.

Use Cases

This skill is tailored for cloud professionals who require rapid insights into their infrastructure health. Common use cases include:

• Architectural Discovery: Quickly mapping out existing cloud resources and verifying the organizational hierarchy of your cloud environment.
• Security Posture Auditing: Automatically scanning your resources for potential risks, compliance gaps, or misconfigured settings that deviate from best practices.
• Proactive Maintenance: Querying the Smart Advisor to receive scheduled insights or real-time alerts regarding product-specific optimizations or performance bottlenecks.

Example Prompts

1. "OpenClaw, please scan my cloud infrastructure and list any high-risk items identified by the Smart Advisor."
2. "Show me the current architecture diagram for my production environment and summarize any pending configuration recommendations."
3. "List all resources associated with my database groups and highlight any potential risks identified in the latest audit."

Tips & Limitations

• Security First: Never store your AK/SK in plain text within your code. Always use your system's secure environment variable configuration (.bashrc, .zshrc, or Windows Environment Variables).
• Role Permissions: The agent operates under the principle of least privilege. If prompted, the creation of the advisor role is limited to the QcloudAdvisorFullAccess policy, which is strictly read-only for security purposes.
• Session Management: Remember that if you are using temporary credentials, the TENCENTCLOUD_STS_DURATION default is 1 hour; for longer sessions, update your configuration accordingly.