82/100 (Low)

OpenClaw： benign
VirusTotal： suspicious
StaticScan： clean

OpenClaw： benign

The skill is internally coherent for managing Tencent COS (it asks for COS keys, installs COS-related npm packages, and writes config files), but there are minor metadata inconsistencies and expected ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773113485259,
        "_id": "k974jz9xjkk1jqvyaps9d3a4g182ngz3",
        "changelog": "Tencent Cloud COS Skill 1.0.8 – Security & setup overhaul\n\n- **Enforces security**: Now explicitly *requires* sub-account credentials (minimum permission), strongly forbidding main account API keys.\n- **Setup flow rewritten**: The setup script now only installs dependencies in the project directory (`node_modules`), never globally. It does not modify shell startup files.\n- **Persistent credentials**: Credentials are written only to `~\/.mcporter\/mcporter.json` and `~\/.cos.conf` (if coscmd is present), with strict file permissions. Does not auto-persist environment variables.\n- **Safe installation**: No longer attempts to install Python tools (`coscmd`) automatically, and only configures them if present.\n- **Updated detection and execution strategy**: Uses `npx mcporter` for all MCP-related CLI calls and detection checks, clarifying local vs global tool priority.\n- **Clearer documentation**: Setup side effects, credential handling, and security risks are now prominently described.",
        "changelogSource": "user",
        "createdAt": 1773113485259,
        "parsed": {
            "clawdis": {
                "emoji": "☁️",
                "install": [
                    {
                        "bins": [
                            "mcporter"
                        ],
                        "id": "node-mcporter",
                        "kind": "node",
                        "label": "Install mcporter (MCP CLI)",
                        "package": "mcporter"
                    },
                    {
                        "bins": [
                            "cos-mcp"
                        ],
                        "id": "node-cos-mcp",
                        "kind": "node",
                        "label": "Install cos-mcp (COS MCP Server)",
                        "package": "cos-mcp"
                    },
                    {
                        "id": "node-cos-sdk",
                        "kind": "node",
                        "label": "Install COS Node.js SDK",
                        "package": "cos-nodejs-sdk-v5"
                    }
                ],
                "requires": {
                    "config": [
                        "TENCENT_COS_REGION",
                        "TENCENT_COS_BUCKET"
                    ]
                }
            }
        },
        "version": "1.0.8"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ShawnmZhang",
        "handle": "shawnminh",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/31064728?v=4",
        "kind": "user",
        "linkedUserId": "kn75r0rammt45k8qe5we0sh63580c5y0"
    },
    "ownerHandle": "shawnminh",
    "skill": {
        "_creationTime": 1770264723566,
        "_id": "kd7cbq1p8rzc59w6at4qntg6h180jqbt",
        "badges": [],
        "canonicalSkillId": "kd7edvey61szjthvd49qdvzd1h80c2zk",
        "createdAt": 1770264723566,
        "displayName": "Tencent Cloud COS",
        "forkOf": {
            "at": 1770264723566,
            "kind": "duplicate",
            "skillId": "kd7edvey61szjthvd49qdvzd1h80c2zk"
        },
        "latestVersionId": "k974jz9xjkk1jqvyaps9d3a4g182ngz3",
        "ownerUserId": "kn75r0rammt45k8qe5we0sh63580c5y0",
        "slug": "tencentcloud-cos-skill",
        "stats": {
            "comments": 0,
            "downloads": 1458,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 1,
            "versions": 7
        },
        "summary": "腾讯云对象存储(COS)和数据万象(CI)集成技能。当用户需要上传、下载、管理云存储文件， 或需要进行图片处理（质量评估、超分辨率、抠图、二维码识别、水印）、智能图片搜索、 文档转PDF、视频智能封面生成等操作时使用此技能。",
        "tags": {
            "latest": "k974jz9xjkk1jqvyaps9d3a4g182ngz3"
        },
        "updatedAt": 1774322677424
    }
}