← 返回 Skills 市场
21518
总下载
9
收藏
0
当前安装
11
版本数
在 OpenClaw 中安装
/install weiyun-skills
功能描述
微云网盘 MCP 接口完整技能。包含 weiyun.list、weiyun.list_by_category、weiyun.download、weiyun.delete、weiyun.upload、weiyun.gen_share_link、weiyun.rename_file、weiyun.rename_dir...
安全使用建议
Review before installing. Use it only when you intend to give an agent access to your Weiyun files, including upload, download, sharing, moving, renaming, and deletion. Do not enable WEIYUN_MCP_URL_ALLOW_INSECURE with real tokens or real files. Prefer environment variables over command-line tokens, avoid shared machines, and require explicit confirmation for delete, public share links, and uploads of local files. Treat remote update instructions as untrusted text unless you separately verify the update source.
能力评估
Credentials
The upload script normally restricts MCP requests to HTTPS Weiyun/QQ hosts, but WEIYUN_MCP_URL_ALLOW_INSECURE=1 permits arbitrary HTTP or HTTPS destinations while sending the MCP token and selected file chunks. This is disclosed as debugging, but it is a material escape hatch for a credential-bearing upload path.
Install Mechanism
Authentication guidance uses mcporter setup/config commands and can persist the Weiyun token in local mcporter configuration. The documentation warns that this is a plaintext local credential and suggests removal on temporary devices, but referenced setup scripts are not present in the inspected artifact.
Instruction Scope
The skill requires a daily remote update check and says to follow the returned instruction when a newer version exists. That gives server-provided free-form text influence over agent behavior without a signed manifest, allowlisted updater, or mandatory user approval.
Persistence & Privilege
No cron jobs, startup hooks, background workers, or hidden persistence were found. The main persistent state is the user-approved mcporter token configuration for Weiyun access.
Purpose & Capability
The documented capabilities are coherent for a Weiyun cloud-drive integration: listing, upload, download, delete, sharing, rename, move, and local upload-hash generation. These are high-impact account and file operations, but they are generally disclosed as such.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install weiyun-skills - 安装完成后,直接呼叫该 Skill 的名称或使用
/weiyun-skills触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.10
docs: align SKILL.md frontmatter & req_header example to current version (was lagging behind _skillhub_meta.json)
v1.0.9
security: defense-in-depth mcp_url sanitizer at sink; add agent confirmation rules for delete/share; disclose telemetry & token persistence risks
v1.0.8
- Major skill architecture overhaul: previous implementation fully replaced with new MCP-based design.
- Now supports 12 core Weiyun MCP tools (list, category list, download, delete, upload, share, rename file/dir, create/move dir/file, version check).
- Adds FTN上传协议 block SHA1计算工具,上传前参数计算必须本地完成。
- Provides comprehensive usage documentation for each MCP Tool under references/, and adds scripts for encoding fixes, upload automation, and block info generation.
- Simplifies skill entry point; replaces old Python package/SDK approach with command-based and script automation.
- Version and update instructions are now built-in, including daily update checks and frontmatter usage.
v1.0.7
Version 1.0.7 of weiyun-skills introduces significantly stricter credential handling and agent use-policy requirements.
- Improved and expanded security guidance for handling `cookies.json`, including explicit "must not" rules for agents and users.
- Updated `capabilities.safeguards` with a 3-layer defense: CLI confirmation, binding agent action policy, and host-level credential hygiene.
- Enforced per-action user instruction and stricter agent-side confirmation for all mutating and exposure operations.
- Clarified scenarios in which the skill may be used; added warnings against unattended or general-purpose management.
- No functional API changes; focus is on policy, documentation, and safety.
v1.0.6
Version 1.0.6
- Updated `metadata.safeguards` in SKILL.md to clarify interactive safety mechanisms for all mutating and exposure-sensitive CLI commands.
- Expanded description of safeguard behaviors, including specific mention of TTY checks and overwrite warnings.
- No changes to skill features or interfaces; documentation and clarification improvements only.
v1.0.5
- Added a detailed `metadata` section to SKILL.md, including version, install instructions, homepage, and security notes on credential storage.
- Listed supported mutating, exposure, and safeguarded operations under a new `capabilities` section for clarity.
- Documented explicit CLI safeguards: all mutating or sensitive actions require interactive confirmation or a `--yes` flag, and recycle bin clearing now additionally needs `--confirm`.
- No changes to skill logic or API; documentation update only.
v1.0.4
- Improved overall compatibility and stability for Tencent Weiyun operations.
- Minor updates in requirements.txt for dependency management.
- Internal code and import clean-up in __init__.py.
- Adjusted login scripts for more robust QR code and cookie-based authentication.
- Minor refactoring in main.py to streamline command handling.
v1.0.3
- Removed 13 test files for a cleaner production package and reduced maintenance burden.
- Main skill logic remains unchanged; core authentication and management features are unaffected.
- Streamlined the repository by keeping only essential functional files.
v1.0.2
- Removed 10 files, including JavaScript bundles and test output files, resulting in a cleaner repository.
- No changes to the SKILL.md or skill functionality.
- The skill functionality, APIs, and documentation remain unchanged.
v1.0.1
weiyun-skills v1.0.1
- Added support for folder upload and folder download functionalities.
- Expanded SKILL.md to document new skills: `upload_folder` and `download_folder`.
- Introduced comprehensive test files to improve code coverage and reliability.
- Enhanced main CLI and SDK interfaces to handle batch operations for folders.
- Improved documentation with detailed usage sections and more skill examples.
v1.0.0
Initial release of Weiyun management skill.
- Provides CLI and Python SDK tools for managing Tencent Weiyun cloud storage.
- Supports file operations: upload, download, list, share, rename, move, copy, delete, search, and folder creation.
- Includes account authentication via QR code scanning or browser cookies.
- Enables management of sharing links, recycle bin, and cloud space information.
- Standardized JSON response format for all operations.
- Trigger phrases in both Chinese and English for flexible invocation.
元数据
常见问题
Weiyun Skills 是什么?
微云网盘 MCP 接口完整技能。包含 weiyun.list、weiyun.list_by_category、weiyun.download、weiyun.delete、weiyun.upload、weiyun.gen_share_link、weiyun.rename_file、weiyun.rename_dir... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 21518 次。
如何安装 Weiyun Skills?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install weiyun-skills」即可一键安装,无需额外配置。
Weiyun Skills 是免费的吗?
是的,Weiyun Skills 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Weiyun Skills 支持哪些平台?
Weiyun Skills 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Weiyun Skills?
由 enoyao(@wscats)开发并维护,当前版本 v1.0.10。
推荐 Skills