技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.3
统计：⭐ 0 · 247 · 2 current installs · 2 all-time installs
⭐ 0
安装量（当前） 2
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：aohoyo/qiniu-kodo
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill mostly matches a Qiniu KODO client, but there are inconsistencies around Python vs Node usage and missing credential declarations; the installer writes credentials into disk and shell profiles and performs global installs which you should review before running.
目的
Name/description match included Node.js code and an installer for Qiniu KODO. However SKILL.md metadata and required binaries list python3/pip3 and a python package (qiniu-mcp-server) while the packaged code is primarily Node.js (qiniu_node.mjs) and package.json only depends on the qiniu npm package. The docs reference a scripts/qiniu_python module that is not present. This mismatch is unexplained but could be sloppy packaging or incomplete fi…
说明范围
Runtime instructions tell the agent to run scripts/setup.sh and node scripts/qiniu_node.mjs (expected). The setup script creates a config file with access/secret keys, updates the user's shell rc to export QINIU_* vars, configures mcporter, and may install qshell and global npm packages. The instructions do not direct data externally beyond contacting known Qiniu endpoints and official devtools.qiniu.com for qshell; they do persist credentials…
安装机制
Installation uses npm (qiniu) and the setup script performs npm -g installs and downloads qshell from https://devtools.qiniu.com — all are expected for this skill and from plausible sources. The script may invoke sudo when moving qshell into /usr/local/bin and writes files under ~/.mcporter and ~/.local; these global installs increase impact if malicious but are coherent for a CLI installer.
证书
The skill requires (and asks the user to provide) Qiniu accessKey/secretKey but does not declare required environment variables or a primaryEnv in the registry metadata. The setup script writes credentials to config/qiniu-config.json (chmod 600) and appends exports to the user's shell rc — persistent storage of secrets without explicit declaration is a proportionality/information gap. It also configures mcporter and qshell with those credentials.
持久
The skill does not request always:true. The installer will persist configuration and environment exports to the user's home (config/qiniu-config.json, ~/.mcporter/mcporter.json, and .bashrc/.zshrc) and may move a binary into /usr/local/bin (sudo). These are expected for an installer but grant lasting presence and require reviewing before execution.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「qiniu-kodo」。简介：七牛云 KODO 对象存储技能。支持文件上传、下载、列出、删除、获取 URL 等操作。 三层架构：MCP 工具（优先）→ Node.js SDK → qshe…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aohoyo/qiniu-kodo/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。