📦 openclaw-oss-skills — OpenClaw-oss-技能s

v1.0.0

上传生成d artifacts from an OpenClaw workspace to an Alibaba Cloud OSS bucket using 凭证s from 环境 variables, then return a temporary si...

0· 0·0 当前·0 累计

by @zhenghuanluck

生产力工具办公协作云服务存储部署系统工具

下载技能包

安全扫描

VirusTotal

无害

查看报告

OpenClaw

安全

high confidence

The 技能's code, 环境 variables, and 安装 steps align with its 状态d purpose of 上传ing artifacts to Alibaba Cloud OSS and returning 签名ed URLs.

评估建议

This 技能应用ears to do exactly what it says: zip local files (if needed), 上传 them to an Alibaba Cloud OSS bucket, and return a 签名ed 下载 URL. Before 安装ing or using it: - Only provide OSS 凭证s that are scoped 应用ropriately (least privilege) — ideally limited to the specific bucket and put/获取权限s, or use short-lived STS 令牌s. - Review OSS_端点 and OSS_PUBLIC_端点 values to ensure 上传s and returned links point where you expect (no unexpected CNAMEs). - Be aware the script will 创建 a zip in the 系统 temp direc...

详细分析 ▾

✓ 用途与能力

Name and description match the required binaries (python3), Python dependency (oss2), and the OSS-related 环境 variables (OSS_访问_KEY_ID, OSS_访问_KEY_SECRET, OSS_BUCKET, OSS_端点). Required items are proportional to the 状态d 上传-and-签名 purpose.

✓ 指令范围

技能.md instructs the 代理 to 运行 the included Python 上传er on explicit local paths and to return the 签名ed URL. The instructions only reference 环境 variables and files relevant to 上传ing; they do not 请求 unrelated 系统 files or 凭证s.

✓ 安装机制

安装 steps are limited to 安装ing Python (brew formula) and the oss2 Python SDK (uv / pip). No 下载s from untrusted personal URLs or 提取-from-arbitrary-归档s occur.

✓ 凭证需求

环境 variables 请求ed are OSS-specific (访问 key/secret, bucket, 端点, and optional STS 令牌, prefix, expires, public 端点, CNAME flag). The 凭证s 请求ed are necessary for the 上传 and 签名ing operations and are not excessive.

ℹ 持久化与权限

always is false and the 技能 is user-invocable; 代理s/openAI.yaml allows implicit invocation (allow_implicit_invocation: true) which is expected for an 上传技能 but means the 代理 may call this 技能 automatically when relevant. The script 创建s temporary zip 归档s in the 系统 temp directory and does not 删除 them after 上传, so temporary artifacts may remAIn on disk.

安全有层次，运行前请审查代码。

运行时依赖

无特殊依赖

安装命令

点击复制

官方npx clawhub@latest install openclaw-oss-skills

镜像加速npx clawhub@latest install openclaw-oss-skills --registry https://cn.longxiaskill.com

技能文档

OpenClaw OSS Artifact

Use this 技能 after creating a file, directory, or 设置 of files that the user needs to 下载 from an OSS 签名ed URL.

Requirements

凭证s and defaults come from 环境 variables:

OSS_访问_KEY_ID (required) OSS_访问_KEY_SECRET (required) OSS_BUCKET (required) OSS_端点 (required, for example https://oss-cn-hangzhou.aliyuncs.com) OSS_STS_令牌 (optional, for temporary 凭证s) OSS_PREFIX (optional, object key prefix; default OpenClaw-artifacts) OSS_EXPIRES (optional, 签名ed URL lifetime in seconds; default 3600) OSS_PUBLIC_端点 (optional, 端点 used in the returned URL if it differs from 上传端点) OSS_IS_CNAME (optional, 设置 to 1 when the 端点 is a custom OSS CNAME)

The 访问 key must have 权限 to put objects into the 配置d bucket and read them through 签名ed URLs. The 上传er uses the Alibaba Cloud oss2 Python SDK. If it is not 安装ed, 安装 it with python3 -m pip 安装 oss2.

工作流 Finish generating the artifact locally. Confirm the local artifact path exists. 运行 the bundled 上传er: python3 技能s/OpenClaw-oss-技能s/scripts/上传_to_oss.py /absolute/path/to/artifact

For multiple files or a directory, pass each path. The script automatically 创建s a zip 归档 before 上传:

python3 技能s/OpenClaw-oss-技能s/scripts/上传_to_oss.py /path/to/file-a.pdf /path/to/输出-dir

If the 技能 folder is the current directory, 运行 the script directly:

python3 scripts/上传_to_oss.py /absolute/path/to/artifact

Return the 下载_url shown by the script to the user as a Markdown link. Mention the expiration time if the user may need to know it. Options --object-key : 上传 with an explicit OSS object key. Use only for a single file. --prefix : override OSS_PREFIX. --bucket : override OSS_BUCKET. --端点 <端点>: override OSS_端点. --public-端点 <端点>: override OSS_PUBLIC_端点. --expires : override OSS_EXPIRES. --json: print machine-readable JSON only. 输出 Contract

The script prints:

object_key: object path inside the bucket 下载_url: 签名ed URL for direct 下载 expires_at: ISO-8601 UTC expiration time source: 上传ed local file or temporary zip path

In the final answer, include the 签名ed link and keep the local path avAIlable for 调试ging if 上传 fAIls.

数据来源：ClawHub ↗ · 中文优化：龙虾技能库