← Back to Skills Marketplace
Terabox Storage
by
ArthurPatten
· GitHub ↗
· v1.0.0
· MIT-0
179
Downloads
2
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install terabox-storage
Description
Manage TeraBox cloud storage operations including login, upload, download, share, and transfer. Use the terabox CLI tool for file management tasks.
Usage Guidance
This skill appears to be a legitimate TeraBox CLI wrapper, but exercise caution before installing: 1) Source provenance is unknown (no homepage) — prefer skills from known authors. 2) The skill auto-updates itself by contacting terabox.com and downloading a zip that can overwrite scripts and possibly the CLI binary; that means remote changes could change the skill's behavior without further consent. If you install, consider: - Inspecting the code files yourself (install.sh, login.sh, update.sh) and the initial VERSION file. - Running install.sh manually rather than letting the agent do it. - Disabling or auditing auto-updates: run update.sh --check first or remove the auto-update pre-execution call in SKILL.md, or run update.sh without --yes to require confirmation. - Ensure checksums are present and verified before allowing updates; prefer installing official release binaries from verified sources. - Avoid authorizing logins in shared or untrusted environments; login requires you to paste an OAuth code (manual step). If you cannot validate the update endpoint or the owner identity, treat this skill as higher-risk and consider declining installation.
Capability Analysis
Type: OpenClaw Skill
Name: terabox-storage
Version: 1.0.0
The skill is a legitimate management tool for TeraBox cloud storage, providing a CLI wrapper for operations like upload, download, and sharing. It includes well-documented scripts for installation (install.sh), OAuth-based authentication (login.sh), and version management (update.sh) using official domains (terabox.com and teraboxcdn.com). The SKILL.md instructions are notably defensive, enforcing strict confirmation rules, path sanitization to prevent directory traversal, and mandatory security disclaimers before sensitive operations like login.
Capability Assessment
Purpose & Capability
Name, description, and runtime instructions align: the skill installs/uses a terabox CLI and exposes upload/download/share/transfer commands. The included install/login/update scripts are consistent with delivering a CLI-based helper.
Instruction Scope
SKILL.md stays within the stated feature set (install CLI, run terabox commands, validate paths, require explicit triggers and confirmations). It references user config (~/.config/terabox/config.json) and instructs the agent to run auto-update and login scripts; those steps are reasonable for a storage helper but give the skill the ability to fetch code and perform network operations beyond the user's immediate command.
Install Mechanism
install.sh downloads a binary archive directly from a terabox CDN (s5.teraboxcdn.com) and installs to ~/.local/bin — a typical pattern but still a direct network download+extract. More importantly, update.sh fetches a remote update package (zip) from a terabox TCC API-returned URL and extracts it into the skill directory (and can replace the CLI binary). While update.sh includes optional checksum verification, it only uses the checksum if provided by the config API. Automatic remote extraction of archives that can modify skill files is a supply-chain risk.
Credentials
The skill does not request extra environment variables or unrelated credentials. Update.sh supports overriding the config API via TERABOX_UPDATE_API (useful for testing). Login uses an OAuth OOB code flow that does not ask for passwords or secrets in environment variables. No excessive credential access is declared.
Persistence & Privilege
always:false and no system-wide config edits are requested (good). However SKILL.md instructs the agent to run scripts/update.sh --yes before each operation (a silent, non-blocking auto-update). That gives the skill the ability to pull and apply code changes from a remote server automatically at runtime, which raises a maintenance/supply-chain privilege concern if the remote server or update process is compromised or misused.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install terabox-storage - After installation, invoke the skill by name or use
/terabox-storage - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release, adds TeraBox cloud storage management via CLI with strict sandboxing.
- Supports login, upload, download, share, transfer, and file operations using the terabox CLI.
- All file actions restricted to the application sandbox directory for security.
- Built-in user confirmation prompts before potentially destructive actions.
- Pre-execution checks include auto-update, login status, and path validation.
- Comprehensive usage rules, detailed command examples, and references included.
- Compatible with OpenClaw, Claude Code, DuClaw, Ducc, and more.
v0.1.0
Initial release of TeraBox cloud storage management skill.
- Supports upload, download, share, list, transfer, rename, move, and copy files using the terabox CLI.
- Enforces strict trigger and confirmation rules for user safety, including mandatory confirmation steps for ambiguous or potentially destructive actions.
- Requires all file operations to be within the application sandbox directory; rejects illegal path usage.
- Integrates pre-execution checks for skill auto-update and login status.
- Provides scripts for CLI installation and mandatory secure login.
- Includes reference documentation for commands, authentication, usage examples, and troubleshooting.
Metadata
Frequently Asked Questions
What is Terabox Storage?
Manage TeraBox cloud storage operations including login, upload, download, share, and transfer. Use the terabox CLI tool for file management tasks. It is an AI Agent Skill for Claude Code / OpenClaw, with 179 downloads so far.
How do I install Terabox Storage?
Run "/install terabox-storage" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Terabox Storage free?
Yes, Terabox Storage is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Terabox Storage support?
Terabox Storage is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Terabox Storage?
It is built and maintained by ArthurPatten (@arthurpatten); the current version is v1.0.0.
More Skills