← Back to Skills Marketplace
Aws S3
by
PanthroCorp
· GitHub ↗
· v0.2.1
· MIT-0
131
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install panthrocorp-aws-s3
Description
Self-contained AWS S3 SDK bundle for OpenClaw agents
Usage Guidance
Key things to check before installing: (1) Confirm the GitHub release tarball actually contains the pre-built dist/index.cjs (the repo listing here lacks it). If the tarball omits the bundle, installation may attempt to fetch/build dependencies unexpectedly. (2) Verify the tarball checksum (checksums.txt is provided) and inspect the tarball contents locally before running npm install in the gateway. (3) Be aware the SDK uses the AWS default credential chain — any AWS credentials available to the gateway (IMDS or env vars) will be usable by this package; apply least-privilege IAM to the gateway role and restrict S3 permissions to only the buckets/operations needed. (4) If you cannot verify the release archive, install in an isolated/test gateway first. These inconsistencies look like sloppy packaging rather than overt malice, but they warrant caution.
Capability Analysis
Type: OpenClaw Skill
Name: panthrocorp-aws-s3
Version: 0.2.1
The skill bundle is a legitimate wrapper for the official @aws-sdk/client-s3 library, designed to provide a pre-bundled SDK for OpenClaw agents in network-restricted environments. The source code in src/index.mjs simply re-exports the AWS SDK, and the build configuration in esbuild.config.mjs uses standard bundling practices. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found in SKILL.md or the supporting files.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description match the observed behavior: this is a packaged AWS S3 SDK intended for use inside the gateway container. There are no unrelated credentials or binaries requested. However the package claims to 'bundle' the SDK (no internet required), but the repository listing here does not include the built dist file (dist/index.cjs) shown in package.json 'files' — raising a mismatch between stated capability (self-contained bundle) and the provided files.
Instruction Scope
SKILL.md instructs the operator to curl the GitHub releases API and npm install a release tarball into the gateway container (docker exec npm install <URL> ...). That requires network access contrary to the top-level claim 'No internet access required at install time' (the alternative 'from a downloaded tarball' is accurate, but the primary example uses GitHub). Usage examples rely on process.env.EMAIL_BUCKET_NAME and the AWS SDK default credential chain (IMDS/env vars), which are expected but not declared as requirements.
Install Mechanism
There is no registry install spec; installation relies on downloading a tarball from GitHub releases (a known host). That's acceptable in general, but given the earlier claim about being self-contained and offline, the absence of dist/index.cjs in the provided file manifest is suspicious: if the release tarball does not actually include the built bundle, installation could fail or unexpectedly pull dependencies/build steps. The release URL approach is moderate risk but not inherently malicious — verify the release contents and checksums before installing.
Credentials
The skill declares no required env vars or primary credential, which aligns with using the AWS SDK default credential chain. However the runtime will use any AWS credentials available to the gateway/container (IMDS, environment variables, or instance profile). This is expected for an S3 SDK, but you should be aware it can access S3 resources permitted to the container's credentials.
Persistence & Privilege
The skill is not always-enabled, is user-invocable, and does not request special system or other-skill config paths. It does not request persistent system-wide privileges in the manifest.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install panthrocorp-aws-s3 - After installation, invoke the skill by name or use
/panthrocorp-aws-s3 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.1
- Bumped skill version to 0.2.1.
- Updated SKILL.md metadata to reflect the new version.
- No functional or usage changes.
v0.2.0
- Added detailed documentation for installation and usage of the AWS S3 Skill in OpenClaw.
- Explained authentication procedures and requirements, including IMDS and region settings.
- Clarified that all necessary SDK dependencies are pre-bundled; no internet needed during install.
- Noted Node.js availability is required in the gateway container.
- Emphasized support for all S3 SDK commands, not just limited examples.
Metadata
Frequently Asked Questions
What is Aws S3?
Self-contained AWS S3 SDK bundle for OpenClaw agents. It is an AI Agent Skill for Claude Code / OpenClaw, with 131 downloads so far.
How do I install Aws S3?
Run "/install panthrocorp-aws-s3" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Aws S3 free?
Yes, Aws S3 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Aws S3 support?
Aws S3 is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux).
Who created Aws S3?
It is built and maintained by PanthroCorp (@panthrocorp); the current version is v0.2.1.
More Skills