← 返回 Skills 市场
Aws S3
作者
PanthroCorp
· GitHub ↗
· v0.2.1
· MIT-0
131
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install panthrocorp-aws-s3
功能描述
Self-contained AWS S3 SDK bundle for OpenClaw agents
安全使用建议
Key things to check before installing: (1) Confirm the GitHub release tarball actually contains the pre-built dist/index.cjs (the repo listing here lacks it). If the tarball omits the bundle, installation may attempt to fetch/build dependencies unexpectedly. (2) Verify the tarball checksum (checksums.txt is provided) and inspect the tarball contents locally before running npm install in the gateway. (3) Be aware the SDK uses the AWS default credential chain — any AWS credentials available to the gateway (IMDS or env vars) will be usable by this package; apply least-privilege IAM to the gateway role and restrict S3 permissions to only the buckets/operations needed. (4) If you cannot verify the release archive, install in an isolated/test gateway first. These inconsistencies look like sloppy packaging rather than overt malice, but they warrant caution.
功能分析
Type: OpenClaw Skill
Name: panthrocorp-aws-s3
Version: 0.2.1
The skill bundle is a legitimate wrapper for the official @aws-sdk/client-s3 library, designed to provide a pre-bundled SDK for OpenClaw agents in network-restricted environments. The source code in src/index.mjs simply re-exports the AWS SDK, and the build configuration in esbuild.config.mjs uses standard bundling practices. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found in SKILL.md or the supporting files.
能力标签
能力评估
Purpose & Capability
Name/description match the observed behavior: this is a packaged AWS S3 SDK intended for use inside the gateway container. There are no unrelated credentials or binaries requested. However the package claims to 'bundle' the SDK (no internet required), but the repository listing here does not include the built dist file (dist/index.cjs) shown in package.json 'files' — raising a mismatch between stated capability (self-contained bundle) and the provided files.
Instruction Scope
SKILL.md instructs the operator to curl the GitHub releases API and npm install a release tarball into the gateway container (docker exec npm install <URL> ...). That requires network access contrary to the top-level claim 'No internet access required at install time' (the alternative 'from a downloaded tarball' is accurate, but the primary example uses GitHub). Usage examples rely on process.env.EMAIL_BUCKET_NAME and the AWS SDK default credential chain (IMDS/env vars), which are expected but not declared as requirements.
Install Mechanism
There is no registry install spec; installation relies on downloading a tarball from GitHub releases (a known host). That's acceptable in general, but given the earlier claim about being self-contained and offline, the absence of dist/index.cjs in the provided file manifest is suspicious: if the release tarball does not actually include the built bundle, installation could fail or unexpectedly pull dependencies/build steps. The release URL approach is moderate risk but not inherently malicious — verify the release contents and checksums before installing.
Credentials
The skill declares no required env vars or primary credential, which aligns with using the AWS SDK default credential chain. However the runtime will use any AWS credentials available to the gateway/container (IMDS, environment variables, or instance profile). This is expected for an S3 SDK, but you should be aware it can access S3 resources permitted to the container's credentials.
Persistence & Privilege
The skill is not always-enabled, is user-invocable, and does not request special system or other-skill config paths. It does not request persistent system-wide privileges in the manifest.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install panthrocorp-aws-s3 - 安装完成后，直接呼叫该 Skill 的名称或使用
/panthrocorp-aws-s3触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.2.1
- Bumped skill version to 0.2.1.
- Updated SKILL.md metadata to reflect the new version.
- No functional or usage changes.
v0.2.0
- Added detailed documentation for installation and usage of the AWS S3 Skill in OpenClaw.
- Explained authentication procedures and requirements, including IMDS and region settings.
- Clarified that all necessary SDK dependencies are pre-bundled; no internet needed during install.
- Noted Node.js availability is required in the gateway container.
- Emphasized support for all S3 SDK commands, not just limited examples.
元数据
常见问题
Aws S3 是什么？
Self-contained AWS S3 SDK bundle for OpenClaw agents. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 131 次。
如何安装 Aws S3？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install panthrocorp-aws-s3」即可一键安装，无需额外配置。
Aws S3 是免费的吗？
是的，Aws S3 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Aws S3 支持哪些平台？
Aws S3 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（linux）。
谁开发了 Aws S3？
由 PanthroCorp（@panthrocorp）开发并维护，当前版本 v0.2.1。
推荐 Skills