1
v1.0.0Skill to call Cloud API for Tencent Cloud (腾讯云). Used for cloud automation or resource management.
⭐ 0· 17·0 current·0 all-time
byTencent CloudQ Team@2513483494
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description indicate a Tencent Cloud CLI helper and the SKILL.md only instructs using tccli, installing it, and using its auth flow. There are no unrelated required env vars, binaries, or config paths requested.
Instruction Scope
Runtime instructions are limited to installing/using tccli, calling Tencent Cloud APIs, and consulting documentation via curl. The skill explicitly warns not to ask users for SecretId/SecretKey and describes the browser OAuth flow (tccli auth login). It does not instruct reading unrelated files or exfiltrating data to unexpected endpoints.
Install Mechanism
There is no automated install spec in the bundle (instruction-only). SKILL.md recommends installing tccli via pip, Homebrew, or from GitHub. These are expected for a CLI helper, but pip/Homebrew will download and install code on the host—verify package origin/version and avoid running installs as root when possible.
Credentials
The skill declares no required environment variables or primary credential. It relies on tccli's normal credential files (e.g., default.credential) written by tccli auth login, which is appropriate for this purpose.
Persistence & Privilege
The skill does not request always:true and is user-invocable. The only persistent effect described is tccli writing credential files via its normal auth flow, which is expected and scoped to Tencent Cloud credentials.
Assessment
This skill is an instructions-only helper for the official Tencent Cloud CLI and appears coherent. Before installing or running anything: (1) verify you really want to install tccli and inspect the tccli PyPI/GitHub project and version referenced; (2) run pip/homebrew install commands as a non-root user and review what will be installed; (3) be aware `tccli auth login` launches a local port and requires you to complete a browser OAuth flow—do not paste secrets into chat or into the agent; (4) commands run via tccli can create or destroy cloud resources, so ensure the credentials used have the appropriate (least privilege) permissions; (5) confirm the documentation host (cloudcache.tencentcs.com) is expected in your environment. If you need higher assurance, request the skill author provide explicit package version checksums or point to an official TencentCloud release page.Like a lobster shell, security has layers — review code before you run it.
latestvk973vrkmrerqfyaz3fmrgyf3y584gbym
License
MIT-0
Free to use, modify, and redistribute. No attribution required.