← 返回 Skills 市场
sxliuyu

Cloud Share Downloader

作者 SxLiuYu · GitHub ↗ · v3.0.0 · MIT-0
cross-platform ⚠ suspicious
271
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install share-transfer-tool
功能描述
网盘分享链接转存 - 完全自动化,发的链接就能下
安全使用建议
This skill's promises (auto-transfer and providing a new share link hosted by the skill) are not supported by the code or metadata. Before installing or using it: do not send cookies or account credentials to the skill; ask the author to explain exactly where files are uploaded (what backend/URL/account), how long they are retained, and how share links are generated; request the full server-side code or hosting endpoint so you can verify no exfiltration occurs; if asked to provide cookies, treat that as highly sensitive—prefer using a disposable account or avoiding the skill. If you must test, run the logic locally in an isolated environment and avoid sharing private links or credentials.
功能分析
Type: OpenClaw Skill Name: share-transfer-tool Version: 3.0.0 The skill bundle functions as a cloud drive downloader but explicitly prompts users to provide sensitive session cookies for services like Baidu and Aliyun within `scripts/download.py`. While the tool claims to automate file transfers, soliciting session cookies is a high-risk behavior that can lead to account hijacking. Furthermore, the instructions in `SKILL.md` are ambiguous regarding the destination of the 'transferred' files, which could lead to users inadvertently sharing access to their private data.
能力评估
Purpose & Capability
The description promises complete automation: 'I save to my cloud and return a new share link.' However the package declares no credentials, no config paths, and no install or backend endpoints. The included script only detects link types and prints whether login/cookies are needed; it does not implement uploading or returning a hosted share link. This is a substantive mismatch between claimed capability and actual implementation.
Instruction Scope
SKILL.md instructs users to merely send a share link and promises transfer. The script, however, outputs that some providers 'need Cookie authorization' and suggests asking the user for cookies. That means the runtime flow could ask for highly sensitive data (cookies) not listed in the skill's requirements. The SKILL.md is vague about how files are obtained/stored and gives broad permission ('完全自动化') without specifying data flows or destinations.
Install Mechanism
There is no install spec (instruction-only), which reduces immediate risk from hidden installers. The Python script references using yt-dlp for media parsing in comments/strings but does not include installation steps or vendor-hosted binaries. If the skill actually attempted automated downloads, it would need external binaries (yt-dlp), but those are not declared.
Credentials
No environment variables or primary credentials are declared, yet the script explicitly states it may require users' cloud cookies to save files on behalf of users. Requesting cookies (or other credentials) is sensitive and should be declared; the absence of any declared credential requirement is disproportionate and opaque.
Persistence & Privilege
The skill is not marked 'always' and does not request elevated platform privileges. It does not modify system or other skills' config in the provided files. Autonomous invocation is allowed (the platform default) but there is no evidence of privileged persistence.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install share-transfer-tool
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /share-transfer-tool 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.0.0
Major update: Fully automated cloud share downloader with expanded link support and streamlined user experience. - Skill renamed to "cloud-share-downloader" - Now fully automatic: Users just send a share link, and files are auto-saved and re-shared - Supports more platforms: Baidu, Aliyun, Quark, 115, Bilibili, Douyin, Kuaishou - No manual steps needed—send a link, get a new download link in return - Improved clarity in support and instructions
元数据
Slug share-transfer-tool
版本 3.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Cloud Share Downloader 是什么?

网盘分享链接转存 - 完全自动化,发的链接就能下. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 271 次。

如何安装 Cloud Share Downloader?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install share-transfer-tool」即可一键安装,无需额外配置。

Cloud Share Downloader 是免费的吗?

是的,Cloud Share Downloader 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Cloud Share Downloader 支持哪些平台?

Cloud Share Downloader 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Cloud Share Downloader?

由 SxLiuYu(@sxliuyu)开发并维护,当前版本 v3.0.0。

💬 留言讨论