90/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： suspicious

OpenClaw： benign

The skill's code, runtime instructions, and required environment variables are consistent with its stated purpose of uploading local files to Qiniu and returning public or signed URLs.

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774312758526,
        "_id": "k97dcteb0yxwj5vpx4qnxt32m183hwqy",
        "changelog": "Initial release of qiniu-upload skill.\n\n- Enables uploading local files to Qiniu Cloud with public or signed URL return.\n- Requires Qiniu access credentials and bucket\/domain as environment variables.\n- Provides command-line script for file upload with flexible options (privacy, key naming, expiration).\n- Ensures file path verification and immediate failure if config is missing.\n- Standard JSON output includes file key, URL, size, privacy, and source path.\n- Designed for chaining uploads into downstream workflows like speech transcription.",
        "changelogSource": "auto",
        "createdAt": 1774312758526,
        "parsed": {
            "clawdis": {
                "emoji": "☁️",
                "requires": {
                    "env": [
                        "QINIU_ACCESS_KEY",
                        "QINIU_SECRET_KEY",
                        "QINIU_BUCKET",
                        "QINIU_DOMAIN"
                    ]
                }
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1767sqj4rn7nty5ka6xnbanp183g1p7",
        "displayName": "chenggongdu",
        "handle": "chenggongdu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/38181431?v=4",
        "kind": "user",
        "linkedUserId": "kn7adjbt1bj8fjbwgrw0er27m982m5pe"
    },
    "ownerHandle": "chenggongdu",
    "skill": {
        "_creationTime": 1774312758526,
        "_id": "kd70stjttc7s4jgv7spy1e2hxh83g6n1",
        "badges": [],
        "createdAt": 1774312758526,
        "displayName": "Qiniu Upload",
        "latestVersionId": "k97dcteb0yxwj5vpx4qnxt32m183hwqy",
        "ownerPublisherId": "s1767sqj4rn7nty5ka6xnbanp183g1p7",
        "ownerUserId": "kn7adjbt1bj8fjbwgrw0er27m982m5pe",
        "slug": "qiniu-upload",
        "stats": {
            "comments": 0,
            "downloads": 15,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "Upload local files to Qiniu Cloud and return a publicly accessible URL (or signed private URL). Use when the user wants to upload a local file path to Qiniu,...",
        "tags": {
            "latest": "k97dcteb0yxwj5vpx4qnxt32m183hwqy"
        },
        "updatedAt": 1774314130330
    }
}