← 返回 Skills 市场
640
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install onedrive-integration
功能描述
Copy large/long files to OneDrive for sharing when the user is on Telegram or WhatsApp and wants to view a full document or long file. Use to place files int...
安全使用建议
This skill is internally coherent and the scripts are small and readable, but review the following before installing/using: (1) Understand that files you copy will land in your OneDrive folder and will be synced to Microsoft cloud — do not copy sensitive data you don't want uploaded. (2) The skill requires a local config file (config.env with ONEDRIVE_ROOT) though the registry metadata doesn't declare it; confirm ONEDRIVE_ROOT points to the correct OneDrive folder on your machine. (3) Inspect the bundled scripts (copy_to_onedrive.py and onboard.sh) — they only touch local paths and do not contact external endpoints, but you should run onboard.sh interactively (it will list /mnt/c/Users/*/OneDrive* and prompt) rather than running it blindly. (4) Prefer invoking the script manually or via explicit user approval; avoid globally symlinking into PATH unless you trust the skill and want that convenience. If you want higher assurance, run the scripts in a controlled environment or test with non-sensitive files first.
功能分析
Type: OpenClaw Skill
Name: onedrive-integration
Version: 0.1.0
The skill is designed for legitimate file copying to OneDrive. The `SKILL.md` instructions are clear and guide the agent to ask for user confirmation for sensitive configuration, showing no signs of prompt injection. The `copy_to_onedrive.py` script is well-written, includes robust filename sanitization, and safely parses its configuration file using a custom Python function, mitigating shell injection risks from config values. However, the `scripts/onboard.sh` script is suspicious because it writes user-provided input directly into `config.env` using a heredoc without proper escaping for shell contexts. While the `copy_to_onedrive.py` script's Python parser would not execute shell commands embedded in these values, this practice creates a shell injection vulnerability if `config.env` were ever sourced by another shell script, which is a common pattern for `.env` files.
能力评估
Purpose & Capability
The skill's name/description (copy local files to OneDrive for sharing) aligns with the included scripts which locate a local OneDrive root and copy files there. Minor mismatch: registry metadata lists no required environment variables, but the skill expects a machine-local config.env with ONEDRIVE_ROOT (required) and ONEDRIVE_SUBDIR (optional). This is a packaging/metadata omission rather than a functional mismatch.
Instruction Scope
SKILL.md and scripts limit actions to discovering a OneDrive folder (under /mnt/c/Users/*/OneDrive*), writing a local config.env, and copying specified file paths into a destination directory. That stays within the stated purpose. Important privacy note: copying files into the OneDrive folder causes them to be synced to the cloud by the user's OneDrive client — sensitive files could be uploaded unintentionally. The instructions do not attempt to read unrelated system secrets or contact external services directly.
Install Mechanism
No install spec; the skill is instruction-only with two small scripts bundled. This is low risk — nothing is downloaded from external URLs or installed automatically. Onboarding offers an interactive shell script (onboard.sh) that the user would run manually; it does not silently fetch remote code.
Credentials
The skill does not request cloud credentials or external API keys (good). It relies on a local config.env (ONEDRIVE_ROOT required). The registry metadata did not declare this required config, so users or automated validators might miss that a local path must be set. The included example config contains a concrete absolute path (user-specific) — benign but worth noting.
Persistence & Privilege
The skill is not marked always:true and does not request elevated privileges or modify other skills. It keeps its canonical script inside its skill folder; optional symlinking to PATH is left to the user. Allowing autonomous invocation is the platform default and is not by itself a red flag here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install onedrive-integration - 安装完成后，直接呼叫该 Skill 的名称或使用
/onedrive-integration触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial public release
元数据
常见问题
OneDrive Integration 是什么？
Copy large/long files to OneDrive for sharing when the user is on Telegram or WhatsApp and wants to view a full document or long file. Use to place files int... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 640 次。
如何安装 OneDrive Integration？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install onedrive-integration」即可一键安装，无需额外配置。
OneDrive Integration 是免费的吗？
是的，OneDrive Integration 完全免费（开源免费），可自由下载、安装和使用。
OneDrive Integration 支持哪些平台？
OneDrive Integration 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OneDrive Integration？
由 Zhihao（@moodykong）开发并维护，当前版本 v0.1.0。
推荐 Skills