← Back to Skills Marketplace
21518
Downloads
9
Stars
0
Active Installs
11
Versions
Install in OpenClaw
/install weiyun-skills
Description
微云网盘 MCP 接口完整技能。包含 weiyun.list、weiyun.list_by_category、weiyun.download、weiyun.delete、weiyun.upload、weiyun.gen_share_link、weiyun.rename_file、weiyun.rename_dir...
Usage Guidance
Review before installing. Use it only when you intend to give an agent access to your Weiyun files, including upload, download, sharing, moving, renaming, and deletion. Do not enable WEIYUN_MCP_URL_ALLOW_INSECURE with real tokens or real files. Prefer environment variables over command-line tokens, avoid shared machines, and require explicit confirmation for delete, public share links, and uploads of local files. Treat remote update instructions as untrusted text unless you separately verify the update source.
Capability Assessment
Credentials
The upload script normally restricts MCP requests to HTTPS Weiyun/QQ hosts, but WEIYUN_MCP_URL_ALLOW_INSECURE=1 permits arbitrary HTTP or HTTPS destinations while sending the MCP token and selected file chunks. This is disclosed as debugging, but it is a material escape hatch for a credential-bearing upload path.
Install Mechanism
Authentication guidance uses mcporter setup/config commands and can persist the Weiyun token in local mcporter configuration. The documentation warns that this is a plaintext local credential and suggests removal on temporary devices, but referenced setup scripts are not present in the inspected artifact.
Instruction Scope
The skill requires a daily remote update check and says to follow the returned instruction when a newer version exists. That gives server-provided free-form text influence over agent behavior without a signed manifest, allowlisted updater, or mandatory user approval.
Persistence & Privilege
No cron jobs, startup hooks, background workers, or hidden persistence were found. The main persistent state is the user-approved mcporter token configuration for Weiyun access.
Purpose & Capability
The documented capabilities are coherent for a Weiyun cloud-drive integration: listing, upload, download, delete, sharing, rename, move, and local upload-hash generation. These are high-impact account and file operations, but they are generally disclosed as such.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install weiyun-skills - After installation, invoke the skill by name or use
/weiyun-skills - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.10
docs: align SKILL.md frontmatter & req_header example to current version (was lagging behind _skillhub_meta.json)
v1.0.9
security: defense-in-depth mcp_url sanitizer at sink; add agent confirmation rules for delete/share; disclose telemetry & token persistence risks
v1.0.8
- Major skill architecture overhaul: previous implementation fully replaced with new MCP-based design.
- Now supports 12 core Weiyun MCP tools (list, category list, download, delete, upload, share, rename file/dir, create/move dir/file, version check).
- Adds FTN上传协议 block SHA1计算工具,上传前参数计算必须本地完成。
- Provides comprehensive usage documentation for each MCP Tool under references/, and adds scripts for encoding fixes, upload automation, and block info generation.
- Simplifies skill entry point; replaces old Python package/SDK approach with command-based and script automation.
- Version and update instructions are now built-in, including daily update checks and frontmatter usage.
v1.0.7
Version 1.0.7 of weiyun-skills introduces significantly stricter credential handling and agent use-policy requirements.
- Improved and expanded security guidance for handling `cookies.json`, including explicit "must not" rules for agents and users.
- Updated `capabilities.safeguards` with a 3-layer defense: CLI confirmation, binding agent action policy, and host-level credential hygiene.
- Enforced per-action user instruction and stricter agent-side confirmation for all mutating and exposure operations.
- Clarified scenarios in which the skill may be used; added warnings against unattended or general-purpose management.
- No functional API changes; focus is on policy, documentation, and safety.
v1.0.6
Version 1.0.6
- Updated `metadata.safeguards` in SKILL.md to clarify interactive safety mechanisms for all mutating and exposure-sensitive CLI commands.
- Expanded description of safeguard behaviors, including specific mention of TTY checks and overwrite warnings.
- No changes to skill features or interfaces; documentation and clarification improvements only.
v1.0.5
- Added a detailed `metadata` section to SKILL.md, including version, install instructions, homepage, and security notes on credential storage.
- Listed supported mutating, exposure, and safeguarded operations under a new `capabilities` section for clarity.
- Documented explicit CLI safeguards: all mutating or sensitive actions require interactive confirmation or a `--yes` flag, and recycle bin clearing now additionally needs `--confirm`.
- No changes to skill logic or API; documentation update only.
v1.0.4
- Improved overall compatibility and stability for Tencent Weiyun operations.
- Minor updates in requirements.txt for dependency management.
- Internal code and import clean-up in __init__.py.
- Adjusted login scripts for more robust QR code and cookie-based authentication.
- Minor refactoring in main.py to streamline command handling.
v1.0.3
- Removed 13 test files for a cleaner production package and reduced maintenance burden.
- Main skill logic remains unchanged; core authentication and management features are unaffected.
- Streamlined the repository by keeping only essential functional files.
v1.0.2
- Removed 10 files, including JavaScript bundles and test output files, resulting in a cleaner repository.
- No changes to the SKILL.md or skill functionality.
- The skill functionality, APIs, and documentation remain unchanged.
v1.0.1
weiyun-skills v1.0.1
- Added support for folder upload and folder download functionalities.
- Expanded SKILL.md to document new skills: `upload_folder` and `download_folder`.
- Introduced comprehensive test files to improve code coverage and reliability.
- Enhanced main CLI and SDK interfaces to handle batch operations for folders.
- Improved documentation with detailed usage sections and more skill examples.
v1.0.0
Initial release of Weiyun management skill.
- Provides CLI and Python SDK tools for managing Tencent Weiyun cloud storage.
- Supports file operations: upload, download, list, share, rename, move, copy, delete, search, and folder creation.
- Includes account authentication via QR code scanning or browser cookies.
- Enables management of sharing links, recycle bin, and cloud space information.
- Standardized JSON response format for all operations.
- Trigger phrases in both Chinese and English for flexible invocation.
Metadata
Frequently Asked Questions
What is Weiyun Skills?
微云网盘 MCP 接口完整技能。包含 weiyun.list、weiyun.list_by_category、weiyun.download、weiyun.delete、weiyun.upload、weiyun.gen_share_link、weiyun.rename_file、weiyun.rename_dir... It is an AI Agent Skill for Claude Code / OpenClaw, with 21518 downloads so far.
How do I install Weiyun Skills?
Run "/install weiyun-skills" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Weiyun Skills free?
Yes, Weiyun Skills is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Weiyun Skills support?
Weiyun Skills is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Weiyun Skills?
It is built and maintained by enoyao (@wscats); the current version is v1.0.10.
More Skills