📦 tencent-agent-storage — 云盘管理
v1.0.10一站式管理腾讯云专属网盘：上传备份、列举目录、下载分享、删除重命名，支持大文件分片与断点续传，自动同步本地与云端，权限可控，秒级检索。
0· 510·0 当前·0 累计
by 下载技能包
最后更新
2026/4/17
安全扫描
OpenClaw
安全
high confidenceThe skill's code, required binaries, and environment variables match its stated purpose (upload/list/info for Tencent SMH cloud storage); nothing in the package appears to perform unrelated or covert actions.
评估建议
This skill appears coherent for managing Tencent SMH cloud files. Before installing: (1) review and confirm you want to give the tool your smh_accessToken (it requires a space-level/admin token to upload and generate links); (2) be aware the script reads config files in your home directory (~/.tencentAgentStorage/.env, ~/.openclaw/openclaw.json, ~/.hermes/.env) to find credentials—if those files contain other sensitive tokens you may prefer to supply only the needed smh_* environment variables a...详细分析 ▾
✓ 用途与能力
Name/description, required binaries (node/npm), required env vars (smh_libraryId, smh_accessToken, smh_spaceId, smh_basePath), and the included script all align with a Tencent SMH cloud storage client for upload/list/info operations.
ℹ 指令范围
Runtime instructions and the script stay within cloud storage operations. The script does read configuration files in the user's home directory (~/.tencentAgentStorage/.env, ~/.openclaw/openclaw.json, ~/.hermes/.env) to obtain smh_* credentials; reading these agent config files is plausible for credential discovery but is broader than only reading process env variables and may expose other local config contents to the running script (the script only uses smh_ keys). The script also runs a child_process execSync('npm root -g') only to locate a globally installed SDK if needed.
✓ 安装机制
This is an instruction-only skill (no installer). SKILL.md suggests installing Node from official Node.js sources and installing the smh-node-sdk via npm (global or local). No obscure or personal download hosts are used in the instructions.
ℹ 凭证需求
Requested env vars (smh_libraryId, smh_accessToken, smh_spaceId, smh_basePath) are appropriate for a cloud storage client. The script will also parse ~/.openclaw/openclaw.json and ~/.hermes/.env for env-like entries; while it only consumes smh_* keys, it does access other config files that may contain unrelated secrets or environment entries.
✓ 持久化与权限
Skill is not always-enabled, does not request system-wide changes, and the included code does not modify other skills or global agent configuration. It runs only when invoked.
⚠ scripts/agent-storage.js:17
Shell command execution detected (child_process).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.102026/4/9
tencent-agent-storage 1.0.10 - No user-facing changes in this release. - Internal: Version number updated; no code changes detected. - All features and configurations remain unchanged.
● 可疑
安装命令
点击复制官方npx clawhub@latest install tencent-agent-storage
镜像加速npx clawhub@latest install tencent-agent-storage --registry https://cn.longxiaskill.com