TencentCloud CVM

创建、管理腾讯云 CVM 云服务器实例，支持实例操作、促销查询、成本控制及安全组配置。

Before installing: 1) Confirm the package includes the referenced helper files (config/.env.example, verify_config.py). SKILL.md references these but they are not in the manifest—missing files may break the skill. 2) Treat TENCENT_SECRET_ID/TENCENT_SECRET_KEY as sensitive: create a dedicated sub-user with the narrowest permissions needed (avoid using the root/main account). 3) Review the Python code (src/cvm_manager.py) yourself to ensure there are no unexpected network endpoints or telemetry. 4) Prefer creating a least-privilege policy (only actions actually required) rather than granting blanket cvm:*/vpc:*/cbs:* where possible. 5) Run the skill in a non-production or isolated environment first, and rotate/revoke keys after testing. 6) Consider asking the publisher to correct the registry metadata to list required env vars and to include the missing files or fix instructions; the current inconsistencies justify caution.

Type: OpenClaw Skill Name: tencentcloud-cvm Version: 1.2.0 The skill bundle is a legitimate tool for managing Tencent Cloud CVM instances using the official tencentcloud-sdk-python. The code in cvm_manager.py implements standard cloud management functions (create, start, stop, list instances) and includes a hardcoded reference for promotion plans. The SKILL.md documentation provides clear setup instructions and correctly emphasizes security best practices, such as using CAM sub-users with limited permissions and protecting API credentials in .env files. No indicators of malicious intent, data exfiltration, or prompt injection were found.