TencentCloud Lighthouse

管理腾讯云轻量应用服务器，实现创建、删除、开关机、查询状态及促销方案查询与成本控制。

This skill appears to implement what it claims (Lighthouse management) and needs your Tencent Cloud API keys to function — which is expected — but the registry metadata incorrectly states no required env vars. Before installing: (1) only use sub-user API keys with the minimum necessary permissions (avoid giving full account access); (2) narrow the IAM policy instead of using lighthouse:*/vpc:* if possible; (3) do not commit .env to source control and rotate keys regularly; (4) review the shipped Python files (e.g., verify_config.py and the rest of src/lighthouse_manager.py) to confirm there are no unexpected network endpoints or exfiltration; (5) prefer installing and running this in an isolated environment (or sandbox) and verify behavior with test credentials; and (6) ask the publisher to correct the registry metadata to declare the required env vars and to explain why each permission is needed. If you cannot verify the source or code, treat the skill as untrusted.

Type: OpenClaw Skill Name: tencentcloud-lighthouse Version: 1.2.0 The tencentcloud-lighthouse skill bundle is a legitimate management tool for Tencent Cloud Lighthouse instances. It uses the official tencentcloud-sdk-python to perform standard operations such as creating, starting, stopping, and deleting instances, as well as querying promotion plans and system images. The code in src/lighthouse_manager.py follows standard security practices by using environment variables for credentials and providing clear instructions for minimal IAM permissions (lighthouse:* and vpc:*).