tencentcloud-tke-skill

腾讯云 TKE 容器服务全栈运维专家，支持集群管理、K8s 资源操作、Pod 排障、Helm 部署、TCR 镜像仓库管理

This skill appears to implement a legitimate TKE + Kubernetes CLI, but the registry metadata fails to declare the sensitive credentials and required binaries the scripts use. Before installing: 1) Review the two Python files (tke_cli.py, k8s_cli.py) yourself or have a trusted reviewer confirm there are no hidden network endpoints or exfiltration logic; 2) Only provide Tencent Cloud credentials with least privilege (scoped, temporary if possible); avoid using your root/owner keys; 3) Be aware the tool will read KUBECONFIG and ~/.kube/config (these contain cluster admin credentials); consider using a dedicated kubeconfig with limited rights; 4) Ensure kubectl and helm are the versions you expect and run the tool in an isolated environment if possible; 5) Ask the author/maintainer to update the skill manifest to declare required env vars (TENCENTCLOUD_SECRET_ID/TENCENTCLOUD_SECRET_KEY), and mention required binaries (kubectl, helm, python) so the metadata accurately reflects runtime needs.

Type: OpenClaw Skill Name: tencentcloud-tke-skill Version: 1.0.0 The skill bundle provides a legitimate and well-structured set of administrative tools for managing Tencent Kubernetes Engine (TKE) and Kubernetes resources. The Python scripts (tke_cli.py and k8s_cli.py) wrap official Tencent Cloud SDKs and standard binaries (kubectl, helm) to perform cluster operations, registry management, and RBAC configuration. Security practices are observed, such as using subprocess lists to prevent shell injection, setting 0600 permissions on temporary kubeconfig files, and providing dry-run options for destructive actions. No evidence of data exfiltration, unauthorized persistence, or malicious prompt injection was found.