← 返回 Skills 市场
Qiniu Upload
作者
chenggongdu
· GitHub ↗
· v0.1.0
· MIT-0
141
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install qiniu-upload
功能描述
Upload local files to Qiniu Cloud and return a publicly accessible URL (or signed private URL). Use when the user wants to upload a local file path to Qiniu,...
安全使用建议
This skill appears coherent and implements exactly what it claims (upload a local file to Qiniu and return a URL). Before installing or running: 1) Only provide QINIU_ACCESS_KEY/QINIU_SECRET_KEY to agents you trust — the secret key can be used to create signed URLs and should be protected. 2) Test with a non-sensitive file first to confirm the runtime environment (Node version) supports global fetch/FormData/Blob APIs (modern Node >=18 is typically required). 3) Be aware that private signed URLs are bearer tokens: treat them as secrets and limit expiry when appropriate. 4) Confirm QINIU_DOMAIN points to the intended CDN/public domain to avoid accidental public sharing. 5) If you need stricter isolation, run the script locally yourself rather than giving credentials to an agent.
功能分析
Type: OpenClaw Skill
Name: qiniu-upload
Version: 0.1.0
The skill is a legitimate utility for uploading local files to Qiniu Cloud storage. The implementation in `scripts/upload.js` correctly uses environment variables for credentials, generates standard Qiniu upload tokens using HMAC-SHA1, and communicates only with official Qiniu API endpoints (e.g., upload.qiniup.com). No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
The name/description are a direct match for the provided script and SKILL.md. Required env vars (QINIU_ACCESS_KEY, QINIU_SECRET_KEY, QINIU_BUCKET, QINIU_DOMAIN) are exactly what a Qiniu upload implementation needs; no unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md instructs the agent to run the included Node script with a --file-path and optional flags. The script only reads the specified local file, uses only the declared QINIU_* env vars, uploads to Qiniu endpoints, and returns JSON containing key/url/metadata. It does not attempt to read other system files, other credentials, or send data to unexpected third-party endpoints.
Install Mechanism
There is no install spec or external download. The implementation is shipped as an instruction plus a single Node script — nothing is fetched from external, untrusted URLs during install.
Credentials
Only Qiniu-related environment variables are required (plus optional zone and private flags). The number and type of env vars are proportional to the functionality. Note: successful private URLs contain signed tokens derived from the secret key — that is expected for private object access but means those signed URLs should be treated as secrets.
Persistence & Privilege
The skill does not request permanent/always-on presence (always:false) and does not modify other skills or system-wide config. Autonomous invocation is allowed (default) but not combined with any broad privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install qiniu-upload - 安装完成后，直接呼叫该 Skill 的名称或使用
/qiniu-upload触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of qiniu-upload skill.
- Enables uploading local files to Qiniu Cloud with public or signed URL return.
- Requires Qiniu access credentials and bucket/domain as environment variables.
- Provides command-line script for file upload with flexible options (privacy, key naming, expiration).
- Ensures file path verification and immediate failure if config is missing.
- Standard JSON output includes file key, URL, size, privacy, and source path.
- Designed for chaining uploads into downstream workflows like speech transcription.
元数据
常见问题
Qiniu Upload 是什么？
Upload local files to Qiniu Cloud and return a publicly accessible URL (or signed private URL). Use when the user wants to upload a local file path to Qiniu,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 141 次。
如何安装 Qiniu Upload？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install qiniu-upload」即可一键安装，无需额外配置。
Qiniu Upload 是免费的吗？
是的，Qiniu Upload 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Qiniu Upload 支持哪些平台？
Qiniu Upload 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Qiniu Upload？
由 chenggongdu（@chenggongdu）开发并维护，当前版本 v0.1.0。
推荐 Skills