← 返回 Skills 市场

本地文件上传云端

Name: 本地文件上传云端
Author: ahsbnb

作者 an · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

105

总下载

当前安装

版本数

在 OpenClaw 中安装

/install file-to-link

功能描述

Uploads a local file to Qiniu Cloud Storage and returns a shareable URL.

使用说明 (SKILL.md)

File to Link Skill

This skill provides a professional and reliable way to take a local file and get a publicly accessible URL for it. It uses Qiniu Kodo Cloud Storage as the backend.

This skill was upgraded from a previous version that used a less reliable, temporary hosting service. It now uses a robust cloud storage provider and correctly handles file paths with special characters (e.g., Chinese, spaces).

SECURITY WARNING

Do not use this skill for sensitive, private, or confidential files.

Files uploaded using this skill may become publicly accessible depending on the bucket's configuration. Use this tool only for non-sensitive data that you are comfortable sharing.

Core Functionality

The skill takes a local file path as input, uploads the file to a pre-configured Qiniu Kodo bucket, and prints the resulting public URL to standard output.

Prerequisites

This skill requires the qiniu Python package to be installed. If it's not present, the skill will fail with an import error.

pip install qiniu

Usage Example

To upload a file and get its link, execute the core Python script with the --file parameter.

# Example usage
& "F:\python 3.10\python.exe" "C:\Users\EDY\.openclaw\skills\file-to-link\scripts\create_link.py" --file "F:\周明慧\资料\clawhub_skill\违规·素材\违规视频1.mp4"

Parameters

--file (required): The full, absolute local path to the file you want to upload.

Output

If the upload is successful, the script will print only the URL to its standard output. For example:

http://tbbc24uef.hn-bkt.clouddn.com/%E8%BF%9D%E8%A7%84%E8%A7%86%E9%A2%911.mp4_1772527755

If there is an error (e.g., file not found, Qiniu credentials incorrect), an error message will be printed to standard error, and the standard output will be empty.

安全使用建议

This skill will upload any local file you point it at to a Qiniu bucket. Before installing or running it: (1) Do not use it for private or sensitive files — uploaded objects may be publicly accessible. (2) Inspect your ~/.openclaw/config.json to see what Qiniu credentials would be used; the skill reads qiniu_access_key, qiniu_secret_key, qiniu_bucket_name, and qiniu_domain from that file but the skill metadata did not declare this requirement. (3) Consider storing credentials in a place you control or modifying the script to use environment variables instead. (4) Note: the shipped script has a bug (it references urllib.parse.quote but does not import urllib) — it will raise an error unless patched. (5) Test with non-sensitive sample files first, and prefer running in an isolated environment. If you need this functionality, ask the author to update the SKILL.md/metadata to declare the config path and required keys and to fix the missing import and documentation.

功能分析

Type: OpenClaw Skill Name: file-to-link Version: 1.0.0 The skill possesses high-risk capabilities, including reading local files and uploading them to a remote cloud provider (Qiniu), which are necessary for its stated purpose but inherently risky. It also accesses sensitive credentials stored in `~/.openclaw/config.json`. A functional bug exists in `scripts/create_link.py` where `urllib.parse` is used but not imported, which will cause a `NameError` during execution. While the `SKILL.md` provides a clear security warning about public data exposure, the combination of high-privilege file/network access and credential handling warrants a suspicious classification under the provided guidelines.

能力评估

⚠ Purpose & Capability

The skill's stated purpose (upload a local file to Qiniu) matches the code's behavior, but the registry metadata claims no required config or credentials while the script reads Qiniu credentials and settings from ~/.openclaw/config.json. The manifest should declare that it needs Qiniu credentials/config; the current mismatch is incoherent.

⚠ Instruction Scope

SKILL.md tells the user to install the qiniu Python package and run the script with --file and warns about public uploads, but it does NOT document the required configuration file location or required config keys (qiniu_access_key, qiniu_secret_key, qiniu_bucket_name, qiniu_domain). The runtime instructions therefore omit essential configuration steps. Also, the script will attempt to read arbitrary local file paths (which is necessary for the stated purpose) — this is expected but should be explicitly documented as a privacy risk (the README warns about sensitivity, which is good).

ℹ Install Mechanism

No install spec (instruction-only) — low install risk. SKILL.md correctly instructs to pip install the qiniu package; that dependency is reasonable for the stated functionality. No network downloads of arbitrary code are included in the skill bundle itself.

⚠ Credentials

The skill requires sensitive Qiniu credentials (access key/secret + bucket/domain) but does not declare them in metadata; instead it silently reads ~/.openclaw/config.json. Requesting access to a user-owned config file with credentials is proportionate to the upload task only if clearly declared and optional alternatives (environment variables) are provided. The lack of disclosure and the unexpected config path are disproportionate and surprising.

✓ Persistence & Privilege

The skill does not request persistent or elevated privileges, does not set always:true, and has no install hooks. It only reads a config file from the user's home and performs network uploads as part of its function — expected for this purpose.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install file-to-link
安装完成后，直接呼叫该 Skill 的名称或使用 /file-to-link 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release: Uploads local files to Qiniu Cloud Storage and returns a public URL. - Improved reliability by switching from a temporary hosting service to Qiniu Kodo. - Correctly handles file paths with special characters (e.g., Chinese, spaces). - Security note: Uploaded files may become publicly accessible—do not use for sensitive data. - Requires the qiniu Python package.

元数据

Slug file-to-link

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题