TencentCloud Manager

腾讯云资源统一管理，支持CVM云服务器、Lighthouse轻量应用服务器和COS对象存储的创建、配置、运维及成本优化。

This skill appears to implement Tencent Cloud management and legitimately needs Tencent API keys, but there are mismatches and missing pieces you should resolve before installing or handing over credentials: 1) The registry metadata does NOT list the required environment vars, yet SKILL.md and the code require TENCENT_SECRET_ID and TENCENT_SECRET_KEY — treat that as a red flag and ask the publisher why metadata is incomplete. 2) Confirm the source and provenance (repository/homepage) — the skill's Source is unknown and no homepage is provided. 3) Verify the presence and contents of the referenced helper modules (tencentcloud_cvm, tencentcloud_lighthouse, tencentcloud_cos) — they are imported by the main code but are not bundled here; ensure they come from trusted packages. 4) Do NOT supply master account keys; create a scoped sub-user with the minimal permissions shown in docs and rotate keys regularly. 5) Inspect the full tencentcloud_manager.py and any helper modules for network calls or unexpected endpoints before trusting the keys. If you cannot validate the origin, avoid installing or providing credentials.

Type: OpenClaw Skill Name: tencentcloud-manager Version: 1.2.0 The TencentCloud-Manager skill bundle provides a unified interface for managing Tencent Cloud resources (CVM, Lighthouse, and COS). The code in `src/tencentcloud_manager.py` implements standard cloud management patterns, including resource lifecycle management, cost estimation, and audit logging. It follows security best practices by explicitly instructing users to use sub-user credentials with minimal permissions (documented in `docs/permission-policy.md`) rather than master account keys. No evidence of data exfiltration, malicious execution, or prompt injection was found; the logic is consistent with the stated purpose of resource orchestration.