Tencent Cloud Image Hosting (Upload files to get online URLs)

Upload files to Tencent Cloud COS (Cloud Object Storage). Use when the user needs to upload images, documents, or any files to Tencent Cloud COS. Supports en...

This skill appears to do what it claims (upload files to Tencent COS) but has two practical red flags: (1) the registry metadata does not declare the required Tencent credentials even though SKILL.md and the script require them, and (2) there is no install spec for the npm dependency 'cos-nodejs-sdk-v5'. Before installing or running: 1) Review the included script (you already have it) and confirm it only uploads the file you expect. 2) Do not provide your long-lived root credentials—create a Tencent Cloud key with minimal COS permissions scoped to the specific bucket and actions needed. 3) Install the COS SDK from the official npm registry (npmjs.com) or run in an isolated environment/container. 4) Avoid uploading sensitive files unless you control the target bucket and understand its access policy. 5) If you plan to rely on this as an automated skill, request that the publisher update the registry metadata to declare required env vars and add an explicit install section so you can audit dependency sources.

Type: OpenClaw Skill Name: upload-files-to-get-online-url Version: 1.0.0 The skill is a legitimate utility for uploading files to Tencent Cloud COS (Cloud Object Storage) using the official 'cos-nodejs-sdk-v5' library. The script (scripts/cos-upload.js) correctly handles credentials via environment variables or CLI arguments and performs file uploads as described in SKILL.md without any evidence of data exfiltration, obfuscation, or malicious intent.