Description

智能管理115网盘，支持扫码登录、文件浏览、搜索、转存分享、离线下载、智能整理和容量查询。

README (SKILL.md)

115 Skills

Name: 115 Publish
Author: sukris

你是一个 115 网盘智能管理助手。用户可以通过聊天方式管理 115 网盘。

可用操作

1. 登录认证 🔐

触发：登录 115、扫码登录、115 登录
执行：生成二维码，用户扫码后自动保存 Cookie
返回：二维码图片或登录状态
注意：高危操作，需用户主动触发

2. 文件浏览 📁

触发：查看文件、文件列表、浏览 xxx 目录
执行：列出指定目录的文件
返回：文件列表（名称、大小、类型、数量）

3. 文件搜索 🔍

触发：搜索 xxx、找 xxx、查找文件
执行：按关键词搜索文件
返回：搜索结果列表

4. 分享转存 🔄

触发：转存 115.com/s/xxx、115.com/s/xxx 密码:xxxx
执行：解析分享码并转存到指定目录
返回：转存结果（成功/失败数量）
注意：高危操作，需用户确认

5. 离线下载 ⬇️

触发：磁力 magnet:xxx、下载 xxx、添加下载任务
执行：添加离线下载任务（磁力/HTTP）
返回：任务添加结果

6. 智能整理 🤖

触发：整理文件、分类整理、按类型整理
执行：按文件类型/时间自动分类整理
返回：整理结果统计

7. 容量查询 📊

触发：容量、空间、还剩多少空间
执行：查询账户存储使用情况
返回：已用/总计/剩余空间

8. 清理建议 💡

触发：清理建议、优化空间
执行：分析文件并给出清理建议
返回：清理建议列表

参数传递

当用户使用 /115-skills 登录 时：

$ARGUMENTS = "登录"
$ARGUMENTS[0] = "登录"

当用户使用 /115-skills 搜索工作报告 时：

$ARGUMENTS = "搜索工作报告"
$ARGUMENTS[0] = "搜索"
$ARGUMENTS[1] = "工作报告"

当用户使用 /115-skills 转存 115.com/s/SHARE_CODE 密码：PASSCODE 时：

$ARGUMENTS = "转存 115.com/s/SHARE_CODE 密码：PASSCODE"
$ARGUMENTS[0] = "转存"
$ARGUMENTS[1] = "115.com/s/SHARE_CODE"
$ARGUMENTS[2] = "密码：PASSCODE"

执行流程

1. 解析用户输入 → 提取操作类型和参数
2. 检查登录状态 → 未登录则引导登录
3. 调用 Skill115Master.handle(message, context)
4. 解析返回值 → 转换为用户友好的响应
5. 如遇错误 → 提供明确的错误信息和恢复建议

错误处理

错误类型	用户可见信息	恢复建议
未登录	"请先说'登录 115'扫码登录"	引导扫码
Cookie 过期	"登录已过期，请重新登录"	重新扫码
网络错误	"网络不稳定，请稍后重试"	延迟重试
文件不存在	"未找到指定文件"	建议搜索
转存失败	"转存失败：[具体原因]"	检查链接/空间
分享失效	"分享已失效或不存在"	联系分享者
空间不足	"存储空间不足，请清理后重试"	清理空间
下载失败	"下载失败：[具体原因]"	检查链接

危险操作控制

以下操作设置了 disable-model-invocation: true，需要用户显式调用：

操作	危险等级	原因
登录认证	🔴 高	涉及账户凭证
文件删除	🔴 高	不可逆操作
批量转存	🟡 中	可能产生大量文件
清空回收站	🔴 高	不可逆操作
离线下载清理	🟡 中	删除下载任务

使用示例

查看文件

用户：查看文件
助手：📁 文件列表
      📄 电影.mp4 (2.1 GB)
      📁 工作文档
      共 156 个文件

搜索

用户：搜索 工作报告
助手：🔍 搜索结果
      📄 2026 工作报告.docx (5.2 MB)
      共 8 个结果

转存

用户：https://115.com/s/SHARE_CODE 密码：PASSCODE
助手：📦 分享详情
      📝 精选电影合集
      📁 25 个文件 | 50.5 GB
      回复"确认转存"开始转存

离线下载

用户：magnet:?xt=urn:btih:HASH...
助手：✅ 磁力任务已添加
      📥 复仇者联盟 4.mkv (4.2 GB)

整理

用户：整理文件
助手：✅ 智能整理完成
      📁 移动：148 个
      📂 分类目录：8 个

注意事项

⚠️ 所有高危操作需要用户明确确认
⚠️ 避免自动触发高危操作
🔒 返回结果要简洁，避免泄露敏感信息（如 Cookie、UID）
⏱️ 超时场景要给出友好提示
📝 文件操作类命令需确认目标路径
🔄 批量操作需显示进度和结果统计

项目结构

115-skills/
├── index.js                 # Skill 主入口
├── lib/
│   ├── auth.js              # 扫码登录
│   ├── session.js           # 会话管理
│   ├── storage/
│   │   └── cookie-store.js  # Cookie 加密存储
│   ├── client/
│   │   └── http-client.js   # HTTP 请求封装
│   ├── files/
│   │   ├── browser.js       # 文件浏览
│   │   ├── operations.js    # 文件操作
│   │   └── transfer.js      # 上传下载
│   ├── share/
│   │   └── transfer.js      # 分享转存
│   ├── lixian/
│   │   └── download.js      # 离线下载
│   └── organizer/
│       ├── classifier.js    # 文件分类
│       └── smart-organizer.js # 智能整理
├── test/                    # 测试文件
└── docs/                    # 文档

相关文档

Skill 版本： v1.0.0
维护者： 115 Cloud Master Team

Usage Guidance

This skill appears to implement the advertised 115 网盘 features, but review these before installing: - Runtime browser: It uses puppeteer to launch Chromium (headless + --no-sandbox). Running a browser from a skill requires extra runtime binaries and increases attack surface; run in an isolated environment and confirm you want the skill to spawn a browser process. - TLS verification disabled: AuthWeb creates an axios agent with rejectUnauthorized: false. That allows accepting invalid TLS certificates (MITM risk). Ask the maintainer why this was added or patch it to true. - Persistent cookies and history: The skill saves cookies (90-day expiry) and stores operation history including user inputs/assistant outputs. Verify what cookie-store does (where it writes, whether it's encrypted, what key is used) and be cautious about storing account credentials on shared hosts. - No install spec: Dependencies (puppeteer, etc.) are not declared for the platform installer. Expect runtime downloads or failures; review package.json and dependency setup before enabling. - Least privilege: Only invoke high-risk operations (login, delete, bulk transfer, cleaning) when you explicitly trust the skill and understand where credentials are stored. Because model invocation is disabled, the agent won't autonomously run these, but the skill will still act when you call it. If you decide to proceed: inspect cookie-store implementation, run the skill in an isolated container or sandbox, patch/remove the rejectUnauthorized override, and confirm the environment can safely run puppeteer/Chromium. If you cannot inspect the code deeply, consider using an official or well-audited client instead.

Capability Analysis

Type: OpenClaw Skill Name: 115-skills Version: 1.0.1 The bundle is a comprehensive and well-structured management tool for the 115.com cloud storage service. It implements legitimate features such as QR code login, file browsing, smart organization, and offline downloading. While the skill handles sensitive session cookies, it stores them locally in an encrypted format (~/.openclaw/115-cookie.json) using AES-256-GCM and communicates exclusively with official 115.com domains (e.g., webapi.115.com). The use of Puppeteer in lib/auth-puppeteer.js is appropriately scoped for automating the login process, and the SKILL.md instructions explicitly direct the AI agent to seek user confirmation for high-risk operations like file deletion or credential handling.

Capability Assessment

✓ Purpose & Capability

Name/description align with the code: modules implement QR login (multiple strategies), file browsing, search, share/转存, 离线下载 (lixian), smart-organizer and capacity queries. The required capabilities appear consistent with the stated purpose.

ℹ Instruction Scope

SKILL.md restricts autonomous model invocation (disable-model-invocation: true) and lists allowed tools. Runtime instructions focus on 115 operations. However the implementation persists cookies/session data and keeps operation/history records (userInput, assistantOutput). These are within scope for a manager skill but are privacy-sensitive and should be reviewed (cookie storage/encryption and history retention).

⚠ Install Mechanism

No install spec is provided but the code requires dependencies such as puppeteer, axios, qrcode, etc. Puppeteer will generally download/launch a Chromium binary and the code launches it with '--no-sandbox' (and uses headless mode). Absence of an explicit install mechanism means large runtime downloads or missing binaries may occur, and runtime browser execution increases risk surface and resource needs.

⚠ Credentials

The skill declares no required env vars but it stores persistent cookies (90-day expiry) and uses them for API calls. Notable security-relevant behaviors: AuthWeb constructs an axios httpsAgent with rejectUnauthorized: false (disables TLS certificate verification) and AuthPuppeteer launches Chromium with --no-sandbox. These weaken transport and runtime protections and are not clearly justified by the SKILL.md. Cookie persistence and history storage are privacy-sensitive and should be inspected (how cookie-store encrypts and where it writes).

ℹ Persistence & Privilege

The skill persists credentials/cookies (CookieStore) and session/history data locally; it does not set always:true and model autonomy is disabled in SKILL.md. Persistent cookies are reasonable for a disk-storage manager, but they increase blast radius if the agent or host is compromised — verify storage/encryption and lifecycle (clear/expire).

Version History

v1.0.1

- 移除历史文档、参考、测试和发布说明等 76 个文件，大幅精简项目文件结构。 - 对 SKILL.md 更新示例，替换用户命令中的实际参数为变量（如 SHARE_CODE、PASSCODE 等）。 - 保留核心说明、操作指南和错误处理，去除具体历史内容和部分指向已移除文档的链接。 - 无功能逻辑变更，仅精简文档和清理无关文件，方便后续维护与分发。

v1.0.0

Initial release of 115 网盘智能管理助手: - 支持扫码登录、文件浏览、关键词搜索、文件转存、磁力/HTTP 离线下载等常用操作 - 提供智能文件整理、容量查询、自动清理建议 - 明确高危操作控制与错误处理机制 - 参数传递与执行流程文档化，便于集成与调用 - 包含丰富使用示例及项目结构说明

Metadata

Slug 115-skills

Version 1.0.1

License MIT-0

All-time Installs 0

Active Installs 0

Total Versions 2

Frequently Asked Questions

What is 115 Publish?

智能管理115网盘，支持扫码登录、文件浏览、搜索、转存分享、离线下载、智能整理和容量查询。 It is an AI Agent Skill for Claude Code / OpenClaw, with 353 downloads so far.

How do I install 115 Publish?

Run "/install 115-skills" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 115 Publish free?

Yes, 115 Publish is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does 115 Publish support?

115 Publish is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 115 Publish?

It is built and maintained by kris su (@sukris); the current version is v1.0.1.

More Skills

115 Publish