腾讯云对象存储管理

管理腾讯云 COS 存储桶和文件，实现创建删除存储桶、上传下载、生命周期配置及访问权限控制。

This package appears to implement a legitimate Tencent COS manager, but there are packaging and instruction gaps you should address before use: 1) Do not assume the registry metadata lists required credentials — the code requires TENCENT_SECRET_ID and TENCENT_SECRET_KEY in an .env file. 2) Inspect the Python code locally to confirm there are no unexpected network endpoints or hidden telemetry. 3) The SKILL.md references files/commands that are missing (src/verify_config.py, config/.env, references to another skill and tccli); ask the publisher to provide or remove those references. 4) When granting permissions, prefer a narrowly-scoped COS IAM policy (least privilege) rather than a wide wildcard like 'cos:*' or the shown 'name/cos:*' (which appears malformed). 5) Test with a temporary sub-user with minimal COS permissions and limited resources (non-production) and keep keys out of version control; rotate/revoke keys after testing. 6) If you rely on pip-installed dependencies, confirm the exact package names and check their source on PyPI/GitHub before installing. If the publisher cannot clarify the metadata mismatches and missing files, treat the package as untrusted.

Type: OpenClaw Skill Name: tencentcloud-cos-manager Version: 1.0.0 The skill bundle provides a legitimate and well-structured interface for managing Tencent Cloud Object Storage (COS) using the official 'qcloud_cos' Python SDK. The core logic in 'src/cos_manager.py' implements standard operations such as bucket lifecycle management, file uploads/downloads, and cost estimation without any evidence of malicious behavior, data exfiltration, or unauthorized access. While 'SKILL.md' includes a troubleshooting step to view the '.env' file, this is presented as a standard diagnostic procedure for the user rather than a hidden attempt to compromise credentials.