← Back to Skills Marketplace
jakah2551

File share

by Alessandro Tarantino · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
85
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install file-share
Description
Automation skill for File share.
README (SKILL.md)

name: file-share description: Transfer files from OpenClaw workspace to external services using curl upload. Supports transfer.whalebone.io and similar file sharing services.


File Share Skill 📁

Overview 👀

This skill provides a simple way to transfer files from the OpenClaw workspace to external file sharing services using curl upload commands. It's designed for securely sharing files generated within OpenClaw (logs, reports, media, etc.) with external parties or services.

Primary function: Upload a specified file to transfer.whalebone.io using curl's --upload-file option. 🚀

Quick Start ⚡

Transfer a file 📤

Provide the path to a file (relative to OpenClaw workspace) to upload it to transfer.whalebone.io:

/home/ubuntu/.openclaw/workspace/logs/app.log

The skill will:

  1. Validate the file exists ✅
  2. Extract the filename for the upload URL 🔗
  3. Execute: curl --upload-file ./\x3Cfilename> https://transfer.whalebone.io/\x3Cfilename>
  4. Return the download URL provided by the service 📎

Usage Examples 🧩

  • memory/2026-05-15.md → Uploads your daily memory file 📝
  • logs/error.log → Uploads an error log ⚠️
  • media/report.pdf → Uploads a generated PDF report 📄
  • /home/ubuntu/.openclaw/workspace/location-skill.zip → Uploads the location service skill ZIP 📦

Technical Details 🛠️

  • Uses curl for file uploads (pre-installed in most environments).
  • Works with any file accessible from the OpenClaw workspace.
  • Returns the direct download URL from transfer.whalebone.io.
  • Handles both absolute and relative paths (relative to workspace root).
  • Includes basic error handling for missing files and upload failures.
  • No API keys or authentication required for basic usage.

Security Notes 🔒

  • Only files within or below the OpenClaw workspace can be transferred.
  • The skill prevents directory traversal attacks by validating file paths.
  • Original file remains unchanged in the workspace.
  • Transfer.whalebone.io files typically expire after a set period (check their policy).

Resources 📚

scripts/

Contains the executable Python script for file transfers:

  • file_transfer.py - Main script that handles file validation and upload execution.

references/

Documentation about the transfer service and usage guidelines:

  • transfer_service.md - Details about transfer.whalebone.io service.
  • examples.md - Common use cases and example workflows.
Usage Guidance
Only install or use this if you are comfortable sending selected files to transfer.whalebone.io. Review file contents carefully, avoid uploading memory or sensitive files unless intended, and prefer a fixed version with robust path validation before relying on the workspace-only safety claim.
Capability Analysis
Type: OpenClaw Skill Name: file-share Version: 1.0.2 The skill provides a mechanism to upload files from the OpenClaw workspace to a public third-party file-sharing service (transfer.whalebone.io). While the script 'scripts/file_transfer.py' implements path validation to prevent directory traversal and uses safe subprocess execution, the core functionality facilitates easy data exfiltration of potentially sensitive workspace data (e.g., logs, memory files, or configuration) to an unauthenticated public endpoint. This represents a high-risk capability for data leakage, though it lacks clear evidence of intentional malice.
Capability Assessment
Purpose & Capability
The stated purpose of uploading selected files matches the implementation, but the implementation can exceed the advertised workspace-only file boundary.
Instruction Scope
The user-facing security notes overstate the path protection, which could cause users to trust containment that the code does not reliably enforce.
Install Mechanism
There is no installer or remote package-fetching step; the included script uses standard local Python and curl behavior for the stated purpose.
Credentials
Uploading local workspace files to an external file-sharing service is purpose-aligned, but the flawed path guard makes the environment access broader than disclosed.
Persistence & Privilege
No credentials or elevated privileges are requested, but uploaded files are stored by an external service and become downloadable via the returned URL.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install file-share
  3. After installation, invoke the skill by name or use /file-share
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
Initial release of file-share skill for OpenClaw. - Upload files from the OpenClaw workspace to external services, supporting transfer.whalebone.io via curl. - Validates files, prevents directory traversal, handles both relative and absolute paths. - No authentication required; returns a direct download URL after upload. - Provides sample use cases, error handling, and built-in security safeguards. - Includes documentation and helper scripts for reference and usage.
Metadata
Slug file-share
Version 1.0.2
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is File share?

Automation skill for File share. It is an AI Agent Skill for Claude Code / OpenClaw, with 85 downloads so far.

How do I install File share?

Run "/install file-share" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is File share free?

Yes, File share is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does File share support?

File share is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created File share?

It is built and maintained by Alessandro Tarantino (@jakah2551); the current version is v1.0.2.

💬 Comments