← Back to Skills Marketplace
Pilot S3 Bridge
by
Calin Teodor
· GitHub ↗
· v1.0.0
· MIT-0
79
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pilot-s3-bridge
Description
Access cloud storage (S3, GCS, Azure Blob) through a Pilot bridge agent. Use this skill when: 1. You need to transfer files to/from cloud storage via Pilot a...
Usage Guidance
This skill looks like it does what it says (bridge cloud storage via a Pilot agent) but the SKILL.md and the registry metadata don't match. Before installing or running it: 1) don't export long-lived AWS keys into a shell without careful thought — prefer IAM roles, short-lived tokens, or scoped service accounts and grant the bridge only the minimum permissions (specific buckets/prefixes and only required actions). 2) Ensure required binaries (aws CLI, jq, and any cloud CLIs you need) are installed and come from trusted sources; update the skill metadata to list them. 3) Avoid running the daemon with --public unless you understand the network exposure; prefer private network/VPC or firewall rules and rate limits. 4) Review and test the loop in an isolated environment (no production credentials) to verify it doesn't leak local data or accept dangerous commands from untrusted senders; the skill currently forwards raw aws/ls output back to send-message without escaping. 5) Ask the publisher for an updated SKILL.md/metadata that declares required env vars and CLIs, documents recommended credential handling, and clarifies security considerations. If you cannot obtain those clarifications, treat the skill as risky and run only in a well-restricted, monitored environment.
Capability Analysis
Type: OpenClaw Skill
Name: pilot-s3-bridge
Version: 1.0.0
The skill provides a bridge for cloud storage via the 'pilotctl' utility, but the example implementation in SKILL.md contains critical shell injection vulnerabilities. Specifically, the bash workflow uses unsanitized output from jq (e.g., $BUCKET and $KEY) directly within 'aws s3' command strings, which could allow an attacker to execute arbitrary commands. While these appear to be unintentional security flaws rather than intentional malware, the combination of insecure command execution and the requirement for AWS credentials makes the bundle high-risk.
Capability Tags
Capability Assessment
Purpose & Capability
The skill claims to bridge S3/GCS/Azure via a Pilot agent and declares pilotctl as a required binary, which is coherent. However, the runtime instructions also rely on aws (AWS CLI), jq and potentially gsutil/az CLI for other clouds, plus exporting cloud credentials — none of these are declared in the metadata. The undeclared dependencies are disproportionate to the declared requirements and should have been declared.
Instruction Scope
SKILL.md contains concrete shell code that: starts a public pilot daemon, runs an infinite listen loop, writes received payloads to /tmp and runs aws s3 cp using BUCKET/KEY values from incoming messages, and instructs manual export of AWS keys. It also sends raw command output back to send-message (unescaped), which can leak data or cause parsing problems. The instructions explicitly require reading environment variables and executing network/cloud commands outside what the metadata advertised.
Install Mechanism
This is an instruction-only skill with no install spec or files written at install time, which minimizes install-time risk. The runtime still depends on external CLIs (pilotctl, aws, jq, possibly gsutil/az) being present on PATH.
Credentials
The SKILL.md tells operators to export AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY (and references other cloud CLIs), but the skill metadata declares no required environment variables or primary credential. Requesting cloud credentials is reasonable for a bridge, but the omission in metadata is a mismatch and the skill gives no guidance on limiting scope (least privilege, using short-lived creds, or roles).
Persistence & Privilege
The skill does not request always:true, but the example instructs running pilotctl daemon start --public and a persistent listener loop, which exposes the agent to incoming network messages. Making the daemon public increases the attack surface and amplifies the impact of any credential misuse or malformed requests.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pilot-s3-bridge - After installation, invoke the skill by name or use
/pilot-s3-bridge - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Pilot S3 Bridge?
Access cloud storage (S3, GCS, Azure Blob) through a Pilot bridge agent. Use this skill when: 1. You need to transfer files to/from cloud storage via Pilot a... It is an AI Agent Skill for Claude Code / OpenClaw, with 79 downloads so far.
How do I install Pilot S3 Bridge?
Run "/install pilot-s3-bridge" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pilot S3 Bridge free?
Yes, Pilot S3 Bridge is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pilot S3 Bridge support?
Pilot S3 Bridge is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pilot S3 Bridge?
It is built and maintained by Calin Teodor (@teoslayer); the current version is v1.0.0.
More Skills