← 返回 Skills 市场
202
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install tianshu-qiniu-upload
功能描述
将本地文件(图片、HTML 等)上传到七牛云存储,返回可在线访问的 URL。 Use when: 用户需要把生成的图片、HTML 页面或任意文件上传到云端以便分享链接;用户说「上传到七牛」「生成图片并上传」「把这个 HTML 上传到网上」。 NOT for: 上传到其他云存储(如 S3、OSS);仅生成文件不分享链接。
安全使用建议
This skill appears to do exactly what it claims: upload a local file to Qiniu and print the public URL. Before installing/use: (1) Only provide Qiniu credentials that you trust — these keys can allow access to your bucket; prefer a bucket with restrictive permissions or short-lived/upload-only credentials if possible. (2) The skill has a dependency on the public 'qiniu' npm package; run 'npm install' in the skill directory as instructed and verify the dependency/version if you have supply-chain concerns. (3) The registry entry does not include an automated install step, so the agent or you must ensure the Node environment and dependencies are present. (4) Review QINIU_DOMAIN and QINIU_PREFIX to avoid publishing sensitive local files publicly. If you need more assurance, inspect the upload.js file yourself (it is short and straightforward) before enabling the skill.
功能分析
Type: OpenClaw Skill
Name: tianshu-qiniu-upload
Version: 1.0.2
The skill is a legitimate utility for uploading local files to Qiniu Cloud storage. The code in `scripts/upload.js` uses the official `qiniu` SDK to perform uploads based on user-provided environment variables and file paths, with no evidence of data exfiltration, unauthorized execution, or malicious prompt injection.
能力评估
Purpose & Capability
Name/description (upload to Qiniu) match the actual requirements and behavior: the skill needs Qiniu Access/Secret keys, bucket and domain, and its script uploads a local file to the specified bucket and returns the CDN URL. Requested env vars are appropriate for Qiniu integration.
Instruction Scope
SKILL.md instructs the agent to run a local Node script against a provided file path and to return the resulting URL. The instructions only reference the declared env vars and the local upload script; they do not request other system files or unrelated credentials.
Install Mechanism
No formal install spec is declared in the registry (instruction-only), but the package includes a package.json that depends on the public 'qiniu' npm package and README instructs running 'npm install'. This is not inherently malicious but means the user/agent must run npm install manually (the skill will fail until dependencies are installed). Using a public npm package is normal but carries usual supply-chain considerations.
Credentials
The skill requires QINIU_ACCESS_KEY, QINIU_SECRET_KEY, QINIU_BUCKET, QINIU_DOMAIN (and optionally QINIU_PREFIX). These are proportionate and expected for uploading to Qiniu. No unrelated secrets or multiple external service credentials are requested.
Persistence & Privilege
Skill does not request always:true, does not modify other skills or system-wide settings, and has no special persistence requirements. It runs a local script and returns a URL.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install tianshu-qiniu-upload - 安装完成后,直接呼叫该 Skill 的名称或使用
/tianshu-qiniu-upload触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
Fix SKILL.md metadata format for TsClaw parsing
v1.0.1
English display name
v1.0.0
首次发布
元数据
常见问题
Qiniu Upload 是什么?
将本地文件(图片、HTML 等)上传到七牛云存储,返回可在线访问的 URL。 Use when: 用户需要把生成的图片、HTML 页面或任意文件上传到云端以便分享链接;用户说「上传到七牛」「生成图片并上传」「把这个 HTML 上传到网上」。 NOT for: 上传到其他云存储(如 S3、OSS);仅生成文件不分享链接。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 202 次。
如何安装 Qiniu Upload?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tianshu-qiniu-upload」即可一键安装,无需额外配置。
Qiniu Upload 是免费的吗?
是的,Qiniu Upload 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Qiniu Upload 支持哪些平台?
Qiniu Upload 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Qiniu Upload?
由 tianshu(@wangshengli0421)开发并维护,当前版本 v1.0.2。
推荐 Skills