Tencent COS Uploader

使用腾讯云 COS Python SDK 上传指定本地文件到目标 Bucket，并生成可用于查看和下载的预签名访问链接。用户提到 COS、对象存储、Bucket、上传文件、临时分享链接、签名 URL、下载直链时使用此 skill。

This skill appears to do exactly what it says: upload a local file to Tencent COS and return presigned view/download URLs. Before installing or running it, note that you will need to provide Tencent COS credentials (COS_SECRET_ID and COS_SECRET_KEY, plus COS_REGION and COS_BUCKET or CLI args). The registry metadata does not list these env vars — verify you are comfortable supplying those secrets and prefer using a temporary STS token (COS_SESSION_TOKEN) and least-privilege credentials. Run the script in a controlled environment (not on a machine with unrelated secrets), confirm the target bucket is correct, keep presigned URL expiry short, and inspect the printed JSON (upload_result) for any unexpected behavior. If you plan to allow an agent to call this skill, ensure the agent is only granted the specific COS credentials necessary and not broader account credentials. If you want higher assurance, request that the publisher update the registry metadata to declare required env vars and primary credential so permission reviewers can see the need for secrets up front.

Type: OpenClaw Skill Name: tencent-cos-uploader Version: 0.1.0 The skill is a legitimate utility for uploading files to Tencent Cloud Object Storage (COS) and generating presigned URLs using the official 'cos-python-sdk-v5' library. The script (scripts/cos_upload_and_presign.py) correctly handles credentials via environment variables or CLI arguments and performs its stated function without any signs of data exfiltration, unauthorized execution, or malicious intent.