📦 Qiniu Upload — 七牛云上传
v1.0.2一键把本地图片、HTML 等任意文件上传到七牛云存储，自动生成可公开访问的 URL，方便即时分享。
0· 175·0 当前·0 累计
by 下载技能包
最后更新
2026/3/18
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do exactly what it claims: upload a local file to Qiniu and print the public URL. Before installing/use: (1) Only provide Qiniu credentials that you trust — these keys can allow access to your bucket; prefer a bucket with restrictive permissions or short-lived/upload-only credentials if possible. (2) The skill has a dependency on the public 'qiniu' npm package; run 'npm install' in the skill directory as instructed and verify the dependency/version if you have supply-chain ...详细分析 ▾
✓ 用途与能力
Name/description (upload to Qiniu) match the actual requirements and behavior: the skill needs Qiniu Access/Secret keys, bucket and domain, and its script uploads a local file to the specified bucket and returns the CDN URL. Requested env vars are appropriate for Qiniu integration.
✓ 指令范围
SKILL.md instructs the agent to run a local Node script against a provided file path and to return the resulting URL. The instructions only reference the declared env vars and the local upload script; they do not request other system files or unrelated credentials.
ℹ 安装机制
No formal install spec is declared in the registry (instruction-only), but the package includes a package.json that depends on the public 'qiniu' npm package and README instructs running 'npm install'. This is not inherently malicious but means the user/agent must run npm install manually (the skill will fail until dependencies are installed). Using a public npm package is normal but carries usual supply-chain considerations.
✓ 凭证需求
The skill requires QINIU_ACCESS_KEY, QINIU_SECRET_KEY, QINIU_BUCKET, QINIU_DOMAIN (and optionally QINIU_PREFIX). These are proportionate and expected for uploading to Qiniu. No unrelated secrets or multiple external service credentials are requested.
✓ 持久化与权限
Skill does not request always:true, does not modify other skills or system-wide settings, and has no special persistence requirements. It runs a local script and returns a URL.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/18
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install tianshu-qiniu-upload
镜像加速npx clawhub@latest install tianshu-qiniu-upload --registry https://cn.longxiaskill.com