← 返回 Skills 市场
280
总下载
3
收藏
1
当前安装
4
版本数
在 OpenClaw 中安装
/install quark-auto-save
功能描述
Manage quark-auto-save(QAS, 夸克自动转存, 夸克转存, 夸克订阅) tasks via API.
安全使用建议
This skill appears to be a legitimate client for a Quark Auto-Save API, but the SKILL.md asks the agent to fetch full configuration (GET /data) and write 'Actual configuration values' — including API tokens returned by the server — into a TOOLS.md file. Before installing, consider: 1) Verify the upstream repository (https://github.com/Cp0204/quark-auto-save) and confirm what /data returns and whether it includes sensitive tokens. 2) Ask where TOOLS.md will be created (path) and avoid allowing the skill to write secrets there; if you must persist habits, store only non-sensitive metadata and redact tokens. 3) Limit QAS_TOKEN scope or use an ephemeral/revocable token. 4) Review the included scripts/qas_client.py (it uses token in URL) and run it in an isolated environment/container if possible. 5) Be cautious about using the delete or run endpoints — they can remove or execute tasks; require user confirmation. If you cannot confirm safe handling of TOOLS.md and token persistence, treat this skill as untrusted.
功能分析
Type: OpenClaw Skill
Name: quark-auto-save
Version: 0.8.6
The quark-auto-save skill is a legitimate integration for managing Quark cloud drive automation tasks. The provided Python script (scripts/qas_client.py) is a standard API wrapper using urllib, and the instructions in SKILL.md guide the AI agent on how to automate task creation and habit analysis. While the underlying service's API requires passing the authentication token in the URL query string (a minor security anti-pattern), the skill itself demonstrates no malicious intent, such as data exfiltration to third parties or unauthorized command execution. All behaviors, including the instruction for the agent to record user directory patterns in TOOLS.md, are aligned with the stated purpose of automating media file organization.
能力评估
Purpose & Capability
Name/description, required env vars (QAS_BASE_URL, QAS_TOKEN) and required binaries (curl or python3) are coherent with a remote QAS task-management client. The included Python wrapper performs the expected API calls for listing, adding, running, and deleting tasks.
Instruction Scope
SKILL.md explicitly instructs the agent to call GET /data and 'record Actual configuration values' into TOOLS.md as part of initial analysis. /data can contain API token and other configuration; instructing automatic collection and storage of those values expands scope beyond merely managing tasks and can lead to unintended persistence of secrets. The doc also directs writing to TOOLS.md but does not declare where that file lives or why full config must be stored.
Install Mechanism
No install spec — instruction-only with an included Python script; nothing is downloaded from external URLs during install. This is the lower-risk model for skills.
Credentials
Only QAS_BASE_URL and QAS_TOKEN are required which fits the service. However the instructions to extract and persist configuration (including API token) into TOOLS.md is disproportionate: it elevates local secret storage and retention without justification or safeguards. The skill does not declare TOOLS.md as a required config path nor describe protection of stored secrets.
Persistence & Privilege
The skill asks for persistent recording of user habits and 'Actual configuration values' into a TOOLS.md file (persistence to disk). That creates a lasting artifact containing potentially sensitive data (api_token, crontab, tasklist) even though the skill metadata does not declare such persistent config paths. always:false mitigates forced global inclusion, but the write/persist instruction itself is concerning.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install quark-auto-save - 安装完成后，直接呼叫该 Skill 的名称或使用
/quark-auto-save触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.8.6
- Added SKILL metadata section, including emoji, homepage, environment variable requirements, and binary requirements.
- Now formally documents required environment variables (`QAS_BASE_URL`, `QAS_TOKEN`) and lists Python3 or curl as dependencies.
- Primary environment variable for authentication is explicitly set as `QAS_TOKEN`.
- Minor documentation cleanup and clarification to improve usability and integration.
v0.8.5
quark-auto-save 0.8.4
- Improved the workflow for replacing invalid tasks: now specifies that the shareurl_ban key should be removed after updating the shareurl.
- No code changes detected; documentation updates only.
v0.8.4
No changes detected in this version.
- Version 0.8.4 was released with no file changes or user-facing updates.
- Behavior and documentation remain unchanged from the previous version.
v0.8.7
quark-auto-save v0.8.7
- Initial release of the quark-auto-save skill for managing 夸克自动转存 (QAS) tasks via API.
- Supports adding, analyzing, and organizing Quark cloud drive tasks based on user habits.
- Includes Python client wrapper for API operations.
- Provides clear configuration steps and best practices for token handling.
- Offers detailed workflow guidance for searching, adding, updating, and validating tasks.
元数据
常见问题
Manage quark-auto-save(QAS, 夸克自动转存, 夸克转存, 夸克订阅) tasks via API. 是什么？
Manage quark-auto-save(QAS, 夸克自动转存, 夸克转存, 夸克订阅) tasks via API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 280 次。
如何安装 Manage quark-auto-save(QAS, 夸克自动转存, 夸克转存, 夸克订阅) tasks via API.？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install quark-auto-save」即可一键安装，无需额外配置。
Manage quark-auto-save(QAS, 夸克自动转存, 夸克转存, 夸克订阅) tasks via API. 是免费的吗？
是的，Manage quark-auto-save(QAS, 夸克自动转存, 夸克转存, 夸克订阅) tasks via API. 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Manage quark-auto-save(QAS, 夸克自动转存, 夸克转存, 夸克订阅) tasks via API. 支持哪些平台？
Manage quark-auto-save(QAS, 夸克自动转存, 夸克转存, 夸克订阅) tasks via API. 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Manage quark-auto-save(QAS, 夸克自动转存, 夸克转存, 夸克订阅) tasks via API.？
由 Cp0204（@cp0204）开发并维护，当前版本 v0.8.6。
推荐 Skills