TencentCloud COS Storage

Manage Tencent Cloud COS buckets and files, supporting bucket creation, file upload/download, lifecycle policies, access control, and cost optimization.

This skill appears to implement Tencent COS management code that expects TENCENT_SECRET_ID and TENCENT_SECRET_KEY in a .env, but the registry metadata did not declare those required environment variables — treat that as a red flag. Before installing: 1) Verify the skill source and author (homepage/source unknown). 2) Prefer creating a Tencent sub-user with least-privilege COS actions (limit to specific buckets and operations rather than broad cos:*). 3) Inspect the code (already included) yourself or run it in an isolated environment. 4) Avoid running pip with --break-system-packages on production machines; consider using a virtualenv. 5) Store .env secrets securely and rotate keys if you decide to remove the skill. If you need higher assurance, ask the publisher to update registry metadata to declare required env vars and to correct any incorrect action strings (e.g., 'name/cos:*') so permission requests are explicit and minimal.

Type: OpenClaw Skill Name: tencentcloud-cos-storage Version: 1.1.0 The skill bundle is a legitimate management tool for Tencent Cloud Object Storage (COS). It provides functionality for bucket lifecycle management, file transfers, and cost estimation using the official 'qcloud_cos' SDK. The code in 'src/cos_manager.py' and instructions in 'SKILL.md' are well-documented, follow standard cloud management patterns (e.g., using environment variables for credentials), and contain no evidence of data exfiltration, malicious execution, or prompt-injection attacks.