ClawHub

AtroSnow File Management

v1.0.0

elephant-guide 后端文件（图片/附件）上传、下载、管理完整开发指南。 当用户提到 elephant-guide 项目的文件上传、头像、图片显示、附件管理、filemedia、FileMedia、文件缓存、文件正式入库等场景时触发本技能。 不适用于 AtroSnow 老项目（.c 后缀接口的项目）。

⭐ 0· 8·0 current·0 all-time
byGerald Luo@gerald-luo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name and description match the SKILL.md content: detailed API paths, Java service signatures, callbacks and front-end examples for file upload/download and formalizing cached files. Nothing in the skill asks for unrelated capabilities (cloud credentials, system-level access, or unrelated APIs).
✓
Instruction Scope
The SKILL.md contains implementation guidance and code snippets (Java, frontend) for handling temporary uploads, downloads, and createFileMedia flows. It does not instruct the agent to read host files, environment variables, or send data to third-party endpoints beyond the documented project APIs.
✓
Install Mechanism
No install spec and no code files; this is instruction-only, so nothing is downloaded or written to disk by the skill itself (lowest install risk).
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. The documentation-level content does not justify any additional secrets or system privileges.
✓
Persistence & Privilege
always is false and the skill does not request persistent/system-wide changes or modify other skills' configurations; normal user-invocable/autonomous invocation settings apply.
Assessment
This appears to be a legitimate developer guide only. Before installing or relying on the skill, confirm the source (there's no homepage or repo linked). If you plan to use the guidance in production, review your actual repository code and security practices for file uploads (validation, size limits, scanning, storage ACLs). If you need the skill to run code or access your system, prefer an explicit, signed package or repository rather than an instruction-only skill with an unknown source.

Like a lobster shell, security has layers — review code before you run it.

latestvk9772e11dcqefmkjnsxbe64trn84rt0d

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments