← Back to Skills Marketplace
alger-z

Tencent Cloud TIONE

by Alger-Z · GitHub ↗ · v1.0.5 · MIT-0
cross-platform ⚠ suspicious
334
Downloads
0
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install tencentcloud-tione-skill
Description
腾讯云 TI-ONE 训推平台查询工具集,支持训练任务、在线服务、开发机、资源组、模型仓库、数据集、日志、事件等模块的查询操作。
Usage Guidance
What to check before installing/use: - Metadata mismatch: The registry entry does not list required Tencent credentials but SKILL.md and the scripts do require TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY. Do not assume the platform will prompt for these — verify and set them yourself if you intend to use the skill. - Credentials: Provide least-privilege/read-only API keys for TI-ONE. Although scripts call only Describe* APIs, full-permission keys could be abused if an attacker or a misconfigured agent runs tccli directly. - Install: The skill expects tccli and jq. SKILL.md suggests pip/apt/brew installs; confirm you install from official sources (pip index / distro packages) and inspect the tccli package origin if you are concerned. - Enforcement: The SKILL.md claims 'do not call tccli directly' — this is a procedural constraint, not technically enforced. If you allow autonomous skill invocation, the agent could potentially run other commands unless your runtime sandbox prevents it. Consider disabling autonomous invocation for untrusted skills or review invocation policies. - Audit: Because this skill includes shell scripts, review the scripts (they are included) to confirm there is no code path that prints or transmits secret values. Verify the scripts' behavior in a safe environment with test credentials first. If you want me to, I can produce a short checklist and commands to validate the scripts locally (e.g., run lint/grep for suspicious network endpoints, simulate with dummy env vars, or verify which tccli actions are invoked).
Capability Analysis
Type: OpenClaw Skill Name: tencentcloud-tione-skill Version: 1.0.5 The skill bundle is a legitimate toolset for querying Tencent Cloud TI-ONE platform resources (tasks, services, notebooks, logs, etc.). It uses the official Tencent Cloud CLI (tccli) and jq for processing. The SKILL.md includes strong defensive instructions for the AI agent, explicitly forbidding the disclosure of secrets and restricting operations to read-only queries via predefined bash scripts. No evidence of data exfiltration, malicious execution, or persistence was found.
Capability Assessment
Purpose & Capability
The scripts and SKILL.md implement a read-only TI-ONE query tool that calls tccli Describe* APIs and requires Tencent Cloud API keys and a default region. However the registry metadata earlier in the listing claimed no required env vars / primary credential while SKILL.md declares TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY as required — this mismatch is unexplained and inconsistent with the stated provisioning metadata.
Instruction Scope
SKILL.md explicitly constrains runtime behavior to invoking provided scripts under scripts/*.sh, and the scripts themselves only call tccli Describe* APIs and format output. They read expected environment variables (credentials and region). That scope aligns with the stated read-only purpose, but the restriction ('must not call tccli directly') is advisory only — not enforced by platform — so an agent or user with execution capability could bypass it.
Install Mechanism
There is no registry install spec, but SKILL.md contains an 'openclaw' install hint recommending pip install tccli and apt/brew install jq. Recommending tccli and jq is expected for this task, but the discrepancy between declared install spec (none) and SKILL.md metadata is an inconsistency to clarify. The recommended installers (pip/apt/brew) are standard and not suspicious by themselves.
Credentials
The scripts require TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY and a region variable (TENCENT_TIONE_DEFAULT_REGION). Those credentials are necessary for tccli calls and are proportionate to the function. However the registry-level metadata omitted these required secrets, which is inconsistent; that could lead to unexpected behavior where the skill runs without prompting for credentials or the platform does not surface the credential requirement to users. Ensure the skill only receives least-privilege/read-only credentials.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide privileges. It is user-invocable and allows model invocation (default), which is expected. The skill does not modify other skills or system configs.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install tencentcloud-tione-skill
  3. After installation, invoke the skill by name or use /tencentcloud-tione-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
修正skill描述
v1.0.4
修复安全审核反馈:重写能力边界声明,消除文档与实际实现的矛盾;新增技术架构章节,重写能力边界为三条具体约束
v1.0.3
tencentcloud-tione-skill v1.0.3 - 增加 openclaw 兼容 metadata,包括 emoji、依赖环境要求(secrets/config/install)等信息 - tags 字段补充,便于技能分类 - 精简与调整 description,使技能适配更通用场景描述 - 不影响原有脚本和功能部分,纯文档元信息补充,无破坏性变更
v1.0.2
- 更新文档结构,更详细梳理各查询工具用法参数说明。 - 各查询参数、过滤条件示例补充/格式调整,便于理解。 - 明确所有操作均为只读查询,进一步提示超出能力范围时的应对方案。
v1.0.1
## tencentcloud-tione-skill v1.0.1 - 明确限定所有功能仅限调用 `scripts/` 下的预定义 bash 脚本,移除了“可以调用tccli、SDK、API”等描述。 - 增加能力边界说明:拒绝超范围请求,并引导用户前往腾讯云控制台。 - 强化凭证安全约束,明确无法展示密钥内容。 - 脚本能力和参数文档整体结构与以前一致,补充了用户体验与能力引导相关的说明。 - 其余功能、脚本目录和用法无变化。
v1.0.0
Initial release of Tencent Cloud TI-ONE platform skill. - Provides a suite of read-only query tools for the TI-ONE AI training platform, covering training tasks, online inference services, Notebook development machines, resource groups, model repository, datasets, logs, and events. - Only allows calling pre-defined scripts in the scripts/ directory—direct tccli calls or any write operations are strictly prohibited. - Supports key state filtering for more efficient and accurate queries (e.g., by status or resource availability). - Includes region-aware operations, with notifications when using a default region if not specified by the user. - Comprehensive environment variable and credential setup guidance, along with detailed descriptions and usage instructions for each functional module and script.
Metadata
Slug tencentcloud-tione-skill
Version 1.0.5
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 6
Frequently Asked Questions

What is Tencent Cloud TIONE?

腾讯云 TI-ONE 训推平台查询工具集,支持训练任务、在线服务、开发机、资源组、模型仓库、数据集、日志、事件等模块的查询操作。 It is an AI Agent Skill for Claude Code / OpenClaw, with 334 downloads so far.

How do I install Tencent Cloud TIONE?

Run "/install tencentcloud-tione-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Tencent Cloud TIONE free?

Yes, Tencent Cloud TIONE is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Tencent Cloud TIONE support?

Tencent Cloud TIONE is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Tencent Cloud TIONE?

It is built and maintained by Alger-Z (@alger-z); the current version is v1.0.5.

💬 Comments