← 返回 Skills 市场
134
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install r2-storage
功能描述
Cloudflare R2 Storage management — setup, upload, download, sync via rclone
安全使用建议
This skill appears to be a straightforward rclone-based helper for Cloudflare R2, but note three things before installing: (1) The package metadata omitted the declared R2_CONFIG env input that the SKILL.md and scripts expect — verify where you'll provide credentials and that the skill's declared requirements match your environment. (2) The setup runs a remote install script via curl | sudo bash from rclone.org; if you prefer less risk, install rclone manually from an official source and skip the remote installer. (3) The included show-creds.sh prints access keys in cleartext (including a --raw mode). Be careful that outputs are not captured by untrusted UIs/logs. Recommended steps: inspect the scripts (you already have them), manually install rclone if uncomfortable with piping a remote script to sudo, store credentials in a secure location, and avoid running show-creds in environments where output is logged to third parties.
功能分析
Type: OpenClaw Skill
Name: r2-storage
Version: 1.0.0
The skill bundle uses a high-risk 'curl | sudo bash' pattern to install rclone in SKILL.md and setup.sh, which is a common vector for RCE if the source is compromised. Additionally, show-creds.sh is designed to output sensitive Cloudflare R2 API keys to the terminal, which could lead to accidental credential exposure through the AI agent's output logs or responses.
能力评估
Purpose & Capability
Name/description align with provided scripts: setup, upload, download, sync and list via rclone. Required binary rclone is appropriate. However the registry metadata listed no required env vars while the SKILL.md metadata and scripts expect an R2_CONFIG JSON (and optional R2_* env vars) — a mismatch between declared requirements and runtime behavior.
Instruction Scope
SKILL.md and the scripts stay within the expected R2/rclone scope (writing ~/.config/r2 and ~/.config/rclone and calling rclone operations). One notable behavior: scripts (show-creds.sh) can print secret keys in cleartext (human and --raw machine-readable output), which is expected for a credentials helper but increases the chance of accidental secret leakage if outputs are captured or surfaced by a UI or logs.
Install Mechanism
There is no packaged install; SKILL.md and setup.sh install rclone by piping https://rclone.org/install.sh to sudo bash. rclone.org is a known upstream, but piping a remote script to sudo bash executes remote code with elevated privileges — a moderate operational risk. If you prefer, install rclone yourself from a vetted source before using the skill.
Credentials
The registry metadata claims no required env vars but SKILL.md metadata references R2_CONFIG and scripts look for R2_BUCKET, R2_REMOTE, and an env file (~/.config/r2/env) with R2_ACCESS_KEY_ID / R2_SECRET_ACCESS_KEY. This mismatch is concerning because the skill will read/write credential/config files and may rely on environment values that were not declared at publish time.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide agent settings. It writes config into the user's home (~/.config/r2 and ~/.config/rclone), which is expected for this kind of helper.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install r2-storage - 安装完成后,直接呼叫该 Skill 的名称或使用
/r2-storage触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of r2: Cloudflare R2 Storage management skill using rclone.
- Supports setup, upload, download, list, sync, and delete operations via simple commands.
- Requires rclone and Cloudflare R2 credentials configured via R2_CONFIG.
- Includes troubleshooting tips and direct rclone usage examples.
- Provides setup scripts and helper commands for credentials and management.
元数据
常见问题
R2 Storage 是什么?
Cloudflare R2 Storage management — setup, upload, download, sync via rclone. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 134 次。
如何安装 R2 Storage?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install r2-storage」即可一键安装,无需额外配置。
R2 Storage 是免费的吗?
是的,R2 Storage 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
R2 Storage 支持哪些平台?
R2 Storage 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 R2 Storage?
由 junwatu(@junwatu)开发并维护,当前版本 v1.0.0。
推荐 Skills