📦 Storacha Upload — 去中心化上传
v1.3.1一键将文件上传至 IPFS 并通过 Storacha 网络实现分布式存储，支持创建/切换空间、查看用量与状态，让数据永久、抗审查、低成本托管。
0· 344·0 当前·0 累计
by 下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says: it runs the Storacha CLI to upload and manage files on IPFS. Before installing/using it, consider: (1) uploads to IPFS/Storacha are public and effectively permanent — do not upload sensitive data unless you encrypt it first; (2) the agent is instructed to auto-create/select spaces and retry operations silently, which can create resources in your Storacha account (and potentially incur usage/egress); (3) the SKILL.md recommends running npm install -g @storac...详细分析 ▾
✓ 用途与能力
Name/description match required binaries (storacha, node) and the SKILL.md uses the storacha CLI for uploads, listing, spaces, and usage. Asking for an email-only login flow is consistent with the described Storacha auth flow.
ℹ 指令范围
Instructions correctly focus on running storacha CLI commands and handling file attachments, but they also instruct the agent to auto-create/select spaces and to 'silently' retry/fix missing space issues. This is functionally coherent but grants the agent authority to create resources in the user's Storacha account without explicit confirmation beyond the initial email step — users should be aware of that behavior.
✓ 安装机制
No install spec in manifest; SKILL.md recommends installing the official npm package @storacha/cli via npm install -g which is a standard, traceable registry package. No downloads from unknown hosts or extract operations are present.
✓ 凭证需求
The skill requests no environment variables or secrets. All referenced operations use the storacha CLI and local filesystem (temp files for attachments), which are proportionate to the skill's purpose.
✓ 持久化与权限
always is false and the skill does not request persistent system-wide modifications. The included health-check script and CLI usage affect only the Storacha account and local environment (creating spaces/uploads) which is expected for this functionality.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.3.12026/2/26
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install storacha-upload
镜像加速npx clawhub@latest install storacha-upload --registry https://cn.longxiaskill.com