oss-upload-online-accessUpload files to Aliyun OSS or Tencent COS and return public access URLs. Use when the user wants to upload files, access files online, upload to OSS, get rem...
Install via ClawdBot CLI:
clawdbot install liuhean2021/oss-upload-online-accessGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
upload → https://example.com/file.pngCalls external URL not in known-safe list
https://example.com/file.pngAI Analysis
The skill's core functionality (uploading to Aliyun OSS/Tencent COS) is legitimate and matches its description. The rule-based signals likely flag the example URL 'https://example.com/file.png' used for demonstration, not an actual malicious endpoint. However, the explicit bypass of platform security scanning by omitting required environment variables in metadata is a concerning pattern that weakens security oversight.
Audited Apr 16, 2026 · audit v1.0
Generated Mar 22, 2026
Bloggers, YouTubers, or graphic designers upload images, videos, or documents to generate public URLs for embedding in websites, social media posts, or client deliveries. This enables quick distribution without relying on third-party file-sharing services.
Online store owners upload product photos or videos to OSS, obtaining stable, high-speed URLs for product listings. This reduces server load and ensures fast page loads, improving customer experience and SEO performance.
Distributed teams upload reports, presentations, or code files to OSS, sharing access links via chat or email. This facilitates secure, centralized storage with direct web access, avoiding email attachment limits.
Developers upload app icons, screenshots, or update files to OSS for use in app stores, websites, or CDN integration. This streamlines deployment and version control for digital assets across platforms.
Teachers or online course platforms upload lecture notes, videos, or assignments to OSS, providing students with direct download links. This ensures reliable access and reduces dependency on learning management system storage limits.
Offer basic upload features for free with limited storage or bandwidth, charging for premium tiers with higher limits, advanced analytics, or custom domains. Integrate with existing platforms like CMS or project management tools.
License the skill to marketing or development agencies who rebrand it for client use, providing managed file upload services. Charge based on usage volume or a flat monthly fee per client.
Target large organizations with needs for compliance, security audits, or custom integrations (e.g., with internal systems). Offer dedicated support, training, and tailored configurations for a high-value contract.
💬 Integration Tip
Ensure environment variables are securely set in CI/CD pipelines or local configs, and test uploads with small files first to verify connectivity.
Scored Apr 19, 2026
抖音数据查询与工具助手。覆盖视频详情、用户数据、搜索、热榜、创作者工具、星图达人、内容指数等模块。含部分交互触发和协议工具接口（已标注）。
小红书全场景数据查询助手。支持App和Web多版本API，覆盖笔记详情、用户数据、搜索、商品、评论、话题等全功能。
小红书（RED/XHS）自动化助手。提供完整的小红书操作能力：登录、发布图文/视频、搜索笔记、浏览详情、点赞收藏评论、查看博主主页、内容策划。 当用户提到小红书、红书、XHS、RED、发笔记、搜笔记、小红书运营等任何与小红书相关的操作时使用此 skill，即使用户没有明确说"小红书"但描述的场景明显是小红书（如"...
知乎数据查询助手。覆盖用户信息、搜索、专栏、问答、热榜、评论等全功能。
今日头条数据查询助手。覆盖文章、视频、用户、评论等全功能。
微博全场景数据查询助手。整合App/Web/V2多版本API，覆盖微博详情、用户数据、AI搜索、高级搜索、热搜榜单、评论、视频等全功能。