← 返回 Skills 市场
57
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install ftp-client-zc
功能描述
Performs basic FTP operations like list, upload, download, delete, and rename using stored or provided credentials with Node.js basic-ftp.
使用说明 (SKILL.md)
FTP Client Skill (ZC)
Skill ID: ftp-client-zc
Description: Provides basic FTP operations (list, upload, download, delete, rename) for a configured FTP server. All operations are performed via the Node.js basic-ftp library. Credentials are obtained from OpenClaw's secret store (key ftp-client-zc/cred) or, as a fallback, from a local creds.json file (which is excluded from publishing).
Parameters
| Action | Required args | Optional args | Description |
|---|---|---|---|
list |
host (or use stored) |
path (remote directory, default /) |
List files/directories in the given remote path. |
upload |
localPath, remotePath |
host |
Upload a local file (or directory) to the FTP server. |
download |
remotePath, localPath |
host |
Download a remote file (or directory) to local filesystem. |
delete |
remotePath |
host |
Delete a remote file or empty directory. |
rename |
oldPath, newPath |
host |
Rename or move a remote file/directory. |
If host, user, and password are omitted, the skill will first try to read them from the OpenClaw secret ftp-client-zc/cred; if not found, it falls back to the local creds.json (which should not be published).
Usage Examples
# List root directory (uses stored credentials)
openclaw skill run ftp-client-zc list
# Upload a file, overriding host
openclaw skill run ftp-client-zc upload --host 47.119.167.86 --user test --password zhangchong --localPath "C:\path\file.txt" --remotePath "/uploads/file.txt"
Security
- Credentials are never logged.
- All network actions require explicit user approval via
/approvebefore execution. - When using the local
creds.jsonfallback, ensure the file is protected by filesystem permissions and is excluded from the published npm package via.npmignore.
Created by 张小龙🦞
安全使用建议
This skill appears to implement an FTP client correctly, but there are two things to consider before installing: (1) creds.json is included in the package and contains plaintext credentials — do not use the skill if those are real credentials you care about; ask the author to remove creds.json from the published bundle and rotate any exposed credentials. (2) The code runs shell commands to read OpenClaw secrets (execSync) and will connect to arbitrary FTP hosts and read/write local files as requested — only grant it access if you trust the skill and the FTP target. Prefer a version that uses the platform SDK for secrets (rather than exec'ing a CLI) and that does not include plaintext credentials in the package. If you need higher assurance, request the author to remove the embedded creds.json, show a provenance/source (homepage/repo), and explain how user approval is enforced.
功能分析
Type: OpenClaw Skill
Name: ftp-client-zc
Version: 1.0.0
The skill implements a standard FTP client providing list, upload, download, delete, and rename operations using the 'basic-ftp' library. It retrieves credentials via the OpenClaw CLI ('openclaw secrets get') or a local 'creds.json' fallback. While it uses 'execSync' for secret retrieval and defaults to insecure FTP (secure: false), these behaviors are consistent with the stated purpose and do not show evidence of malicious intent or data exfiltration.
能力评估
Purpose & Capability
The code implements list/upload/download/delete/rename via the basic-ftp library, which matches the skill name/description. However SKILL.md says a local creds.json should be excluded from publishing, yet creds.json is present in the package and contains plaintext credentials — this contradicts the stated guidance and is disproportionate to the stated 'do not publish' claim.
Instruction Scope
SKILL.md limits scope to FTP operations and instructs using secrets from OpenClaw or a local creds.json; the code follows that. The README claims 'All network actions require explicit user approval via /approve' — that is a platform-level behavior, not enforced in the code itself. The runtime code performs expected filesystem access (read/write for upload/download) and network access to arbitrary FTP hosts, which is consistent with the purpose but requires user awareness.
Install Mechanism
There is no external install script in the skill bundle; dependencies are normal npm packages (basic-ftp, minimist). package-lock references an npm mirror but otherwise the install surface is standard and proportionate.
Credentials
The skill doesn't request environment variables, but it runs shell commands (execSync 'openclaw secrets get ftp-client-zc/cred') to obtain secrets from the platform; that is reasonable but notable. The bigger concern is that a creds.json with host/user/password is included in the package manifest and files — this embeds plaintext credentials despite SKILL.md advising it should be excluded. Inclusion of defaults or real credentials in the bundle can leak sensitive data and is disproportionate to the skill's benign description.
Persistence & Privilege
The skill is not always-enabled, does not request system-wide config changes, and does not modify other skills. It does spawn child processes to run the node scripts, which is standard for this packaging approach.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install ftp-client-zc - 安装完成后，直接呼叫该 Skill 的名称或使用
/ftp-client-zc触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of FTP Client Skill (ZC):
- Provides basic FTP operations: list, upload, download, delete, and rename.
- Uses the Node.js `basic-ftp` library for all FTP actions.
- Retrieves credentials securely from OpenClaw's secret store or a local `creds.json` fallback.
- All network actions require explicit user approval before execution.
- Credentials are never logged; local credential files are excluded from published packages.
元数据
常见问题
ftp-client-zc 是什么？
Performs basic FTP operations like list, upload, download, delete, and rename using stored or provided credentials with Node.js basic-ftp. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 57 次。
如何安装 ftp-client-zc？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install ftp-client-zc」即可一键安装，无需额外配置。
ftp-client-zc 是免费的吗？
是的，ftp-client-zc 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
ftp-client-zc 支持哪些平台？
ftp-client-zc 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 ftp-client-zc？
由 张翀（@openclawzhangchong）开发并维护，当前版本 v1.0.0。
推荐 Skills