File Uploader

Upload a local file to Astron Claw Bridge and return a public download URL.

This skill will read /root/.openclaw/openclaw.json to get a bridge host and bearer token, then upload whatever local file you point it at to that remote server. Before installing or running it: 1) Verify you trust the skill author (source/homepage unknown here). 2) Inspect your /root/.openclaw/openclaw.json to confirm the token and bridge are expected and that you want to allow uploads with that token. 3) Never upload sensitive files (credentials, private keys, secrets) with this tool. 4) Prefer a version of the skill that declares the config path/credential requirement in metadata or that accepts explicit host/token parameters rather than silently reading agent config. If you need to proceed, consider running it in an isolated environment or container and review the uploaded file and destination first.

Type: OpenClaw Skill Name: uploader Version: 1.0.0 The skill provides a functional tool to upload local files to a remote server (Astron Claw Bridge), which is a direct mechanism for data exfiltration. The script `scripts/upload_media.py` accesses sensitive configuration data, including authentication tokens, from `/root/.openclaw/openclaw.json`. While the logic appears to align with the stated purpose of the skill, the inherent risk of an AI agent being directed to upload sensitive system files or credentials to a remote endpoint makes this a high-risk capability.