← Back to Skills Marketplace
youngcrazy

cloud189-storage

by Cloud189-netdisk · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
231
Downloads
2
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install cloud189-storage
Description
操作天翼云盘,包括:登录获取鉴权Token、智能图片搜索、查询目录、查询文件列表、搜索文件、文件下载。
README (SKILL.md)

\r \r

天翼云盘操作技能\r

\r 辅助用户登录和操作天翼云盘,包括:登录获取鉴权Token、智能图片搜索、查询目录、查询文件列表、搜索文件、文件下载。\r \r 重要: 你一定不能自己擅自调用注册的天翼云盘工具,因为这是一个复杂的网盘系统,随意的接口调用很容易报错或者达不到用户想要的效果,你必须严格按照每个功能的操作指引文档逐步执行。\r \r

⚠️ 使用前必读\r

\r 在调用任何天翼云盘工具之前,你必须先阅读本 SKILL.md 和对应的功能参考文档。\r \r

  • 错误做法:看到工具列表就直接调用\r
  • 正确做法:先读本文档确定功能类别 → 查功能路由表 → 阅读对应 reference 文档 → 按指引逐步执行\r \r

功能路由表\r

\r | 用户需求 | 参考文档 |\r | --------------------------- | ---------------------------- |\r | "获取天翼云盘鉴权Token;登录天翼云盘" | reference/auth.md |\r | "搜索图片;智能搜图" | reference/searchImages.md |\r | "查询目录;获取文件夹ID" | reference/getFolderInfo.md |\r | "查询文件列表;查看文件夹内容;列出文件" | reference/listFiles.md |\r | "搜索文件;查找文件;按文件名搜索" | reference/searchFiles.md |\r | "下载文件;获取文件下载链接" | reference/downloadFile.md |\r \r ⚠️ 禁止:在没有阅读参考文档的情况下直接调用命令或工具\r \r

执行前检查清单\r

\r 在调用任何命令或工具前,确认你已回答以下问题:\r \r

  1. 我是否已阅读本 SKILL.md?\r
  2. 用户请求属于哪个功能类别?(登录/搜索/列举/下载/...)\r
  3. 我是否找到了对应的 reference/*.md 文档并已阅读?\r
  4. 我是否正在按文档的工作流逐步执行?\r \r

功能\r

\r

登录\r

\r 支持用户登录天翼云盘并获取鉴权Token,参考文档\r \r

智能搜图\r

\r 支持通过自然语言搜索图片,通过语义搜索(基于内容理解的多模态搜索),参考文档\r \r

查询目录\r

\r 支持查询或创建天翼云盘目录并获取文件夹ID,可以指定相对路径或父文件夹ID,参考文档\r \r

查询文件列表\r

\r 支持查询指定目录下的文件和文件夹列表,可按文件类型筛选、分页查询、递归查询(仅PC端同步盘支持),参考文档\r \r

搜索文件\r

\r 支持在指定目录下按文件名搜索文件或文件夹,可按文件类型筛选、分页查询,参考文档\r \r

文件下载\r

\r 支持获取天翼云盘文件的下载链接,可通过fileId或filePath获取,支持下载自有文件、分享文件和群组文件,参考文档\r

Usage Guidance
This skill appears to implement Cloud189 file operations and the included docs are consistent with that purpose, but it requires you to complete an OAuth exchange and (per the docs) paste the authCode or accessToken into the chat and/or save it in your environment. Before using/installing: 1) Do not paste long-lived access tokens or auth codes into public or untrusted chat/history; prefer performing the token exchange locally (browser or your machine) and only provide short-lived/least-privilege credentials if absolutely necessary. 2) Confirm the API host (api.cloud.189.cn) is legitimate for your account and the fixed header value (xkey: e87f4d25953fg) is expected by the service. 3) If you must share tokens for assistance, consider creating a temporary account or revoking the token immediately after use. 4) Because the scanner found a 'base64-block' pattern in the docs, inspect the skill files for any hidden/encoded instructions before granting it access to sensitive data. If you are uncomfortable pasting tokens into the agent, do the OAuth exchange yourself and copy only the minimum data needed (or have the agent guide you without accepting tokens directly).
Capability Analysis
Type: OpenClaw Skill Name: cloud189-storage Version: 1.0.0 The skill bundle provides a legitimate integration for managing China Telecom Cloud189 storage. It uses official API endpoints (api.cloud.189.cn) and implements a standard OAuth2-based authentication flow where the user manually provides an authorization code. The instructions in SKILL.md and the reference files include defensive constraints that limit the agent's scope to a specific application directory ('我的应用/云盘智能体') and provide clear error handling, with no evidence of data exfiltration, malicious execution, or harmful prompt injection.
Capability Assessment
Purpose & Capability
Name/description (Cloud189 login, search, list, download) match the included reference documents and the single external API host (https://api.cloud.189.cn). There are no unrelated binaries, env vars, or install steps requested.
Instruction Scope
The SKILL.md plus reference files are explicit about workflows and limit actions to calling Cloud189's unified Skill API. However the docs instruct the agent to have the user copy/paste an OAuth authorization code and to exchange it (and then save the accessToken), which requires the user to disclose sensitive credentials in the conversation. The pre-scan flagged a 'base64-block' pattern in SKILL.md content — likely due to long encoded/example strings in responses but worth attention as a potential prompt-injection indicator.
Install Mechanism
Instruction-only skill with no install spec and no code files: lowest installation risk. Nothing is written to disk or downloaded by the skill package itself.
Credentials
The skill does not request platform environment variables or other unrelated credentials. It legitimately needs the user's Cloud189 accessToken. However the guidance to save accessToken as an environment variable or paste authCode/accessToken into the chat increases the risk of credential leakage; the skill does not enforce secure storage best practices.
Persistence & Privilege
No always:true, no installs, and no modifications of other skills or global agent configuration. The skill is user-invocable only.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install cloud189-storage
  3. After installation, invoke the skill by name or use /cloud189-storage
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
支持天翼云盘文件管理,包括下载、列表、智能搜图、文件搜索等操作
Metadata
Slug cloud189-storage
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is cloud189-storage?

操作天翼云盘,包括:登录获取鉴权Token、智能图片搜索、查询目录、查询文件列表、搜索文件、文件下载。 It is an AI Agent Skill for Claude Code / OpenClaw, with 231 downloads so far.

How do I install cloud189-storage?

Run "/install cloud189-storage" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is cloud189-storage free?

Yes, cloud189-storage is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does cloud189-storage support?

cloud189-storage is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created cloud189-storage?

It is built and maintained by Cloud189-netdisk (@youngcrazy); the current version is v1.0.0.

💬 Comments