cloud-architecture-discovery
Discover and map your cloud architecture automatically. View architecture directories, topology, and resource relationships via Tencent Cloud Smart Advisor API.
Best for cloud architectsWorks with GitHub
⌘source
- author
@LeoYeAI- language
- Python
★2kstars
306forks
May 6, 2026
✦overview.md
Key Features
- ·AK/SK-based authentication
- ·Automatic cloud architecture discovery
- ·View architecture directories and topology
- ·Get assessment results and risk items
- ·Manage cloud resource relationships
Use Cases
- →Mapping cloud infrastructure for audit or documentation
- →Identifying security risks and optimization opportunities in Tencent Cloud
- →Automating architecture discovery across multiple cloud projects
Best for
- ✓cloud architects
- ✓DevOps engineers
- ✓Tencent Cloud users
Not ideal for
- !non-Tencent cloud users
- !one-time ad-hoc queries
FAQs
name
cloud-architecture-discovery
description
Discover and map your cloud architecture automatically. View architecture directories, topology, and resource relationships via Tencent Cloud Smart Advisor API.
metadata:{"openclaw":{"emoji":"☁️","requires":{"bins":["python3"],"env":["TENCENTCLOUD_SECRET_ID","TENCENTCLOUD_SECRET_KEY"]},"permissions":["network:https://*.tencentcloudapi.com","network:https://cloud.tencent.com","fs:~/.tencent-cloudq/"],"security":{"iam_operations":["cam:GetRole","cam:CreateRole","cam:AttachRolePolicy","cam:DeleteRole","cam:DescribeRoleList","sts:AssumeRole","sts:GetCallerIdentity","advisor:CreateAdvisorAuthorization"],"iam_note":"角色创建/删除为独立步骤，需用户明确同意后执行：create_role.py 创建角色，cleanup.py --cloud 删除角色；check_env.py 仅做只读检测；CreateAdvisorAuthorization 开通智能顾问需用户明确同意","data_handling":"临时凭证仅在内存中使用，不持久化存储；配置文件仅保存角色 ARN，不保存密钥"}}}
☁️ 腾讯云智能顾问助手
核心能力：通过 AK/SK 鉴权调用腾讯云智能顾问（Tencent Cloud Smart Advisor）API，管理云架构图的目录与详情、获取架构评估结果，以及查询风险评估项。
一、鉴权方式
使用腾讯云 API AK/SK 签名认证（TC3-HMAC-SHA256），通过环境变量配置密钥：
1.1 必填环境变量
TENCENTCLOUD_SECRET_ID— 腾讯云 SecretId（必填）TENCENTCLOUD_SECRET_KEY— 腾讯云 SecretKey（必填）
密钥获取地址：https://console.cloud.tencent.com/cam/capi
环境变量必须永久写入 shell 配置文件，确保新会话中仍然生效：
Linux / macOS（写入 ~/.bashrc 或 ~/.zshrc）：
echo 'export TENCENTCLOUD_SECRET_ID="your-secret-id"' >> ~/.bashrc
echo 'export TENCENTCLOUD_SECRET_KEY="your-secret-key"' >> ~/.bashrc
source ~/.bashrc
Windows PowerShell（写入用户级环境变量）：
[Environment]::SetEnvironmentVariable("TENCENTCLOUD_SECRET_ID", "your-secret-id", "User")
[Environment]::SetEnvironmentVariable("TENCENTCLOUD_SECRET_KEY", "your-secret-key", "User")
1.2 角色配置（免密登录需要）
为生成控制台免密登录链接，需要配置 CAM 角色。角色配置分为 检测 和 创建 两个独立步骤，角色创建属于 IAM 写入操作，必须在用户明确同意后才能执行。
步骤一：环境检测（只读）
运行环境自检脚本，检测依赖、版本更新、密钥、角色配置状态：
python3 {baseDir}/check_env.py
自检脚本 仅做只读检测，不会创建或修改任何资源。返回码含义：
0= 环境就绪（密钥 + 角色全部正常）1= Python 版本不满足要求2= AK/SK 未配置或无效3= 角色未配置（需要执行步骤二）4= Skill 版本过旧，请更新 Skill
$install
1-click copynpx skills add LeoYeAI/openclaw-master-skills --skill cloud-architecture-discoverySafety assessment
★
Clarity score
How clear and easy to understand the SKILL.md instructions are, rated from 1 to 5.
4/ 5
very goodClear and well structured, with only minor parts that might need a second read.
◎
Actionability score
How directly an agent can act on the SKILL.md instructions, rated from 1 to 5.
4/ 5
highMostly actionable with clear steps; only a few small gaps remain.