← 返回 Skills 市场
Terabox Storage
作者
ArthurPatten
· GitHub ↗
· v1.0.0
· MIT-0
179
总下载
2
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install terabox-storage
功能描述
Manage TeraBox cloud storage operations including login, upload, download, share, and transfer. Use the terabox CLI tool for file management tasks.
安全使用建议
This skill appears to be a legitimate TeraBox CLI wrapper, but exercise caution before installing: 1) Source provenance is unknown (no homepage) — prefer skills from known authors. 2) The skill auto-updates itself by contacting terabox.com and downloading a zip that can overwrite scripts and possibly the CLI binary; that means remote changes could change the skill's behavior without further consent. If you install, consider: - Inspecting the code files yourself (install.sh, login.sh, update.sh) and the initial VERSION file. - Running install.sh manually rather than letting the agent do it. - Disabling or auditing auto-updates: run update.sh --check first or remove the auto-update pre-execution call in SKILL.md, or run update.sh without --yes to require confirmation. - Ensure checksums are present and verified before allowing updates; prefer installing official release binaries from verified sources. - Avoid authorizing logins in shared or untrusted environments; login requires you to paste an OAuth code (manual step). If you cannot validate the update endpoint or the owner identity, treat this skill as higher-risk and consider declining installation.
功能分析
Type: OpenClaw Skill
Name: terabox-storage
Version: 1.0.0
The skill is a legitimate management tool for TeraBox cloud storage, providing a CLI wrapper for operations like upload, download, and sharing. It includes well-documented scripts for installation (install.sh), OAuth-based authentication (login.sh), and version management (update.sh) using official domains (terabox.com and teraboxcdn.com). The SKILL.md instructions are notably defensive, enforcing strict confirmation rules, path sanitization to prevent directory traversal, and mandatory security disclaimers before sensitive operations like login.
能力评估
Purpose & Capability
Name, description, and runtime instructions align: the skill installs/uses a terabox CLI and exposes upload/download/share/transfer commands. The included install/login/update scripts are consistent with delivering a CLI-based helper.
Instruction Scope
SKILL.md stays within the stated feature set (install CLI, run terabox commands, validate paths, require explicit triggers and confirmations). It references user config (~/.config/terabox/config.json) and instructs the agent to run auto-update and login scripts; those steps are reasonable for a storage helper but give the skill the ability to fetch code and perform network operations beyond the user's immediate command.
Install Mechanism
install.sh downloads a binary archive directly from a terabox CDN (s5.teraboxcdn.com) and installs to ~/.local/bin — a typical pattern but still a direct network download+extract. More importantly, update.sh fetches a remote update package (zip) from a terabox TCC API-returned URL and extracts it into the skill directory (and can replace the CLI binary). While update.sh includes optional checksum verification, it only uses the checksum if provided by the config API. Automatic remote extraction of archives that can modify skill files is a supply-chain risk.
Credentials
The skill does not request extra environment variables or unrelated credentials. Update.sh supports overriding the config API via TERABOX_UPDATE_API (useful for testing). Login uses an OAuth OOB code flow that does not ask for passwords or secrets in environment variables. No excessive credential access is declared.
Persistence & Privilege
always:false and no system-wide config edits are requested (good). However SKILL.md instructs the agent to run scripts/update.sh --yes before each operation (a silent, non-blocking auto-update). That gives the skill the ability to pull and apply code changes from a remote server automatically at runtime, which raises a maintenance/supply-chain privilege concern if the remote server or update process is compromised or misused.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install terabox-storage - 安装完成后，直接呼叫该 Skill 的名称或使用
/terabox-storage触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release, adds TeraBox cloud storage management via CLI with strict sandboxing.
- Supports login, upload, download, share, transfer, and file operations using the terabox CLI.
- All file actions restricted to the application sandbox directory for security.
- Built-in user confirmation prompts before potentially destructive actions.
- Pre-execution checks include auto-update, login status, and path validation.
- Comprehensive usage rules, detailed command examples, and references included.
- Compatible with OpenClaw, Claude Code, DuClaw, Ducc, and more.
v0.1.0
Initial release of TeraBox cloud storage management skill.
- Supports upload, download, share, list, transfer, rename, move, and copy files using the terabox CLI.
- Enforces strict trigger and confirmation rules for user safety, including mandatory confirmation steps for ambiguous or potentially destructive actions.
- Requires all file operations to be within the application sandbox directory; rejects illegal path usage.
- Integrates pre-execution checks for skill auto-update and login status.
- Provides scripts for CLI installation and mandatory secure login.
- Includes reference documentation for commands, authentication, usage examples, and troubleshooting.
元数据
常见问题
Terabox Storage 是什么？
Manage TeraBox cloud storage operations including login, upload, download, share, and transfer. Use the terabox CLI tool for file management tasks. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 179 次。
如何安装 Terabox Storage？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install terabox-storage」即可一键安装，无需额外配置。
Terabox Storage 是免费的吗？
是的，Terabox Storage 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Terabox Storage 支持哪些平台？
Terabox Storage 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Terabox Storage？
由 ArthurPatten（@arthurpatten）开发并维护，当前版本 v1.0.0。
推荐 Skills