← Back to Skills Marketplace
Tencent COS
by
ShawnmZhang
· GitHub ↗
· v1.1.8
· MIT-0
7358
Downloads
4
Stars
131
Active Installs
14
Versions
Install in OpenClaw
/install tencent-cos-skill
Description
腾讯云对象存储(COS)和数据万象(CI)集成技能。覆盖文件存储管理、AI处理和知识库三大核心场景。 存储场景：上传文件到云端、下载云端文件、批量管理存储桶文件、获取文件签名链接分享、查看文件元信息。 图片处理场景：图片质量评估打分、AI超分辨率放大、AI智能裁剪、二维码/条形码识别、添加文字水印、获取图片EXI...
Usage Guidance
Install only if you intentionally want a Tencent COS/CI integration and can provide least-privilege Tencent sub-account or STS credentials. Avoid using root or broad permanent keys, confirm every upload/delete/indexing action yourself, and be especially cautious with delete-multiple, ci-request, and decrypt-env. Generic requests like 'upload to cloud' should be treated as requiring explicit provider confirmation before this skill runs.
Capability Assessment
Purpose & Capability
The stated purpose matches Tencent COS/CI storage, processing, search, and knowledge-base workflows, but the artifact also exposes high-impact capabilities such as object deletion, bulk deletion, bucket policy changes, dataset indexing, and a generic CI request primitive.
Instruction Scope
The trigger text explicitly says to activate for generic cloud upload, download-link, image-processing, and knowledge-base requests even when COS or Tencent Cloud are not mentioned, which creates a real risk of unintended provider use, data transfer, or charges.
Install Mechanism
Installation is disclosed as a local npm install of cos-nodejs-sdk-v5 and setup.sh checks Node/npm, installs the SDK locally, and can verify cloud access. No hidden installer behavior was found in the artifacts reviewed.
Credentials
The cloud permissions and data flows are substantial: local files and user-provided text can be uploaded or processed by Tencent services, cloud objects can be deleted, and knowledge-base bindings can index bucket contents. This is partly expected, but broad activation and weak delete scoping make it under-controlled.
Persistence & Privilege
Critical Tencent credentials are required. The default ephemeral mode and optional .env/.env.enc persistence are disclosed, but decrypt-env can recreate plaintext credentials on disk and the scripts auto-load local credential files, so users need careful containment and least-privilege keys.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tencent-cos-skill - After installation, invoke the skill by name or use
/tencent-cos-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.8
- add Fees Notification
v1.1.7
No file changes detected in this release.
- Version bumped to 1.1.7.
- No feature, documentation, or configuration changes introduced.
v1.1.6
tencent-cos-skill v1.1.6
- No file changes detected in this version.
- Functionality, configuration, and documentation remain unchanged.
v1.1.5
tencent-cos-skill 1.1.5 — No code or documentation changes in this version.
- No file changes were detected.
- Functionality and usage remain the same as the previous version.
v1.1.4
No file changes detected in this version.
- No functional updates or modifications.
- Documentation and metadata remain unchanged.
v1.1.3
No changes detected in this version.
- No file or documentation changes since the previous release.
v1.1.2
No functional changes in this release.
- No file changes detected compared to the previous version.
- Skill description updated to add `description_zh` and `description_en` fields for improved clarity and multilingual support.
v1.1.1
**Expanded scope and enhanced security handling for credentials.**
- Expanded skill coverage to include not only COS文件存储, 图片处理, 文档/媒体处理, and 智能检索, but also 内容审核, 智能语音, 文件处理, 内容识别, and 知识库管理场景。
- Added detailed, user-facing credential security guarantees: environment-variable only by default, optional .env (with AES-256 encryption), no disk write unless permitted, no credential echo.
- Updated metadata: secret/config/env variable mapping, secret sensitivity, and security recommendations (STS建议、子账号最小权限，禁用Root密钥) made explicit.
- Installation simplified: all commands now routed through a single Node.js script (`cos_node.mjs`), with `cos-nodejs-sdk-v5` as sole dependency.
- Removed any references to third-party client CLIs/tools (mcporter, cos-mcp, coscmd) and their logic; all logic consolidated into Node.js SDK.
- Improved trigger phrase and intention matching, including more generic “cloud upload
v1.0.6
- Added initial skill version with 46 files, including full `.git` directory and config.
- Updated onboarding and setup to support custom domain (`Domain`), service domain (`ServiceDomain`), and protocol options.
- Improved setup instructions, now detailing environment variables and command line flags for custom COS/CDN domains.
- Documented domain and protocol handling for all three usage modes (mcporter, Node.js SDK, coscmd).
- Enhanced environment variable docs for Node.js SDK; added custom domain variables.
- Refined coscmd documentation to clarify domain/protocol support and limitations.
v1.0.5
- Added scripts/setup.sh to provide automated environment checking and credential setup.
- Now supports a one-command initialization: check dependencies, prompt for Tencent Cloud credentials, auto-configure all tools.
- SKILL.md updated to document the setup.sh script workflow and prioritize "first run" self-check and guided setup.
- More precise and actionable execution/order logic—explicit instructions for when and how to use mcporter, cos-mcp, SDK or coscmd.
- Expanded metadata for Openclaw integration with formal install steps and required binaries.
v1.0.3
**Summary:** Major simplification and consolidation of skill configuration and documentation. Execution now auto-switches between three official methods.
- Simplified and shortened documentation: removed detailed usage examples, troubleshooting, and tutorials.
- Automatic execution fallback: now supports three methods (cos-mcp MCP, Node.js SDK script, and coscmd CLI) with priority and auto-detection.
- Removed legacy/config/extra files, unified reference and script resources.
- Documentation now focuses on concise configuration and capability overviews for all three supported methods.
- Key functionality tables and tool command summaries are preserved, but redundant content and user guides have been removed.
v1.0.2
- Skill name changed from tencent-cos to tencentcloud-cos-skill.
- No functional or content changes; only the skill name was updated in the configuration file.
v1.0.1
## tencent-cos-skill 1.0.1
- Version updated to 1.0.1 (no file/content changes detected).
- No other changes to code or documentation.
v1.0.0
- Initial release of tencent-cos-skill.
- Provides integration with Tencent Cloud Object Storage (COS) and Data Intelligence (CI), supporting file management, advanced image processing, intelligent search, and document processing.
- Includes detailed installation, configuration, and usage instructions.
- Lists available tools and their parameters for quick reference.
- Covers advanced configuration, multi-environment support, security best practices, and troubleshooting tips.
Metadata
Frequently Asked Questions
What is Tencent COS?
腾讯云对象存储(COS)和数据万象(CI)集成技能。覆盖文件存储管理、AI处理和知识库三大核心场景。 存储场景：上传文件到云端、下载云端文件、批量管理存储桶文件、获取文件签名链接分享、查看文件元信息。 图片处理场景：图片质量评估打分、AI超分辨率放大、AI智能裁剪、二维码/条形码识别、添加文字水印、获取图片EXI... It is an AI Agent Skill for Claude Code / OpenClaw, with 7358 downloads so far.
How do I install Tencent COS?
Run "/install tencent-cos-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tencent COS free?
Yes, Tencent COS is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Tencent COS support?
Tencent COS is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tencent COS?
It is built and maintained by ShawnmZhang (@shawnminh); the current version is v1.1.8.
More Skills