← Back to Skills Marketplace
openclaw-oss-skills
by
zhenghuanluck
· GitHub ↗
· v1.0.0
· MIT-0
43
Downloads
1
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-oss-skills
Description
Upload generated artifacts from an OpenClaw workspace to an Alibaba Cloud OSS bucket using credentials from environment variables, then return a temporary si...
Usage Guidance
This skill appears to do exactly what it says: zip local files (if needed), upload them to an Alibaba Cloud OSS bucket, and return a signed download URL. Before installing or using it:
- Only provide OSS credentials that are scoped appropriately (least privilege) — ideally limited to the specific bucket and put/get permissions, or use short-lived STS tokens.
- Review OSS_ENDPOINT and OSS_PUBLIC_ENDPOINT values to ensure uploads and returned links point where you expect (no unexpected CNAMEs).
- Be aware the script will create a zip in the system temp directory for multi-file uploads and does not remove it after success; clean up if that matters.
- If you don't want automatic uploads, restrict implicit invocation or require explicit user action before running the skill.
- Verify uploaded content before sharing signed links and consider using a short OSS_EXPIRES value when appropriate.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-oss-skills
Version: 1.0.0
The skill bundle provides a legitimate utility for uploading local artifacts to Alibaba Cloud OSS and generating signed download links. The Python script `scripts/upload_to_oss.py` uses the official `oss2` SDK to perform its tasks, including creating temporary ZIP archives for directory uploads and generating time-limited URLs. The instructions in `SKILL.md` are consistent with the code's functionality, and there is no evidence of data exfiltration, unauthorized execution, or malicious prompt injection.
Capability Assessment
Purpose & Capability
Name and description match the required binaries (python3), Python dependency (oss2), and the OSS-related environment variables (OSS_ACCESS_KEY_ID, OSS_ACCESS_KEY_SECRET, OSS_BUCKET, OSS_ENDPOINT). Required items are proportional to the stated upload-and-sign purpose.
Instruction Scope
SKILL.md instructs the agent to run the included Python uploader on explicit local paths and to return the signed URL. The instructions only reference environment variables and files relevant to uploading; they do not request unrelated system files or credentials.
Install Mechanism
Install steps are limited to installing Python (brew formula) and the oss2 Python SDK (uv / pip). No downloads from untrusted personal URLs or extract-from-arbitrary-archives occur.
Credentials
Environment variables requested are OSS-specific (access key/secret, bucket, endpoint, and optional STS token, prefix, expires, public endpoint, CNAME flag). The credentials requested are necessary for the upload and signing operations and are not excessive.
Persistence & Privilege
always is false and the skill is user-invocable; agents/openai.yaml allows implicit invocation (allow_implicit_invocation: true) which is expected for an upload skill but means the agent may call this skill automatically when relevant. The script creates temporary zip archives in the system temp directory and does not delete them after upload, so temporary artifacts may remain on disk.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-oss-skills - After installation, invoke the skill by name or use
/openclaw-oss-skills - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of openclaw-oss-skills.
- Upload generated files, directories, or archives from an OpenClaw workspace to Alibaba Cloud OSS using environment-based credentials.
- Returns a temporary signed OSS download link for shared, published, or requested artifacts.
- Supports uploading multiple files/directories, with auto-zipping for directories or batches.
- Uses the Alibaba Cloud oss2 Python SDK.
- Flexible configuration through environment variables and command-line options.
- Provides output with download URL, expiration info, and debug details.
Metadata
Frequently Asked Questions
What is openclaw-oss-skills?
Upload generated artifacts from an OpenClaw workspace to an Alibaba Cloud OSS bucket using credentials from environment variables, then return a temporary si... It is an AI Agent Skill for Claude Code / OpenClaw, with 43 downloads so far.
How do I install openclaw-oss-skills?
Run "/install openclaw-oss-skills" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is openclaw-oss-skills free?
Yes, openclaw-oss-skills is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does openclaw-oss-skills support?
openclaw-oss-skills is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created openclaw-oss-skills?
It is built and maintained by zhenghuanluck (@zhenghuanluck); the current version is v1.0.0.
More Skills