clawgo-upload
v1.0.1Zip local files or folders, upload to clawgo.me, and get a shareable clone link. Use when the user wants to share, back up, or move local workspace Markdown...
⭐ 1· 168·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description (zip local files and upload to clawgo.me) align with the runtime instructions: build a zip, mint a key, upload via HTTPS, and report the clone link. No unrelated binaries, env vars, or repositories are required.
Instruction Scope
Instructions explicitly reference zipping specific OpenClaw workspace Markdown (e.g., SOUL.md, AGENTS.md) under ~/.openclaw/workspace/ and sending that archive to an external host. This is coherent with the purpose but means potentially sensitive persona/profile/workspace data will be uploaded — the user should verify contents before uploading.
Install Mechanism
No install spec or code is included (instruction-only), so nothing is written to disk or fetched at install time. Lowest-risk install model.
Credentials
The skill requires no environment variables, credentials, or config paths. Network calls are limited to clawgo.me endpoints described in the SKILL.md, which is proportionate to the stated functionality.
Persistence & Privilege
always is false and the skill does not request persistent/privileged presence or modify other skills/settings. It is user-invocable and may be invoked autonomously by the agent (platform default) but there is no additional elevated privilege requested.
Assessment
This skill does what it says: it zips local files and uploads them to https://clawgo.me and returns a shareable link. Before using it, review the files you will include (especially SOUL.md, AGENTS.md, USER.md or any other workspace files) because they may contain sensitive persona, credentials, or configuration. Confirm you trust clawgo.me and understand retention and access: anyone with the clone link/key may be able to download the archive. No credentials are required by the skill, and nothing is installed on your system, but the agent may upload files autonomously if you allow model invocation — only proceed if you are comfortable letting the agent access and transmit those local paths. If you need stronger privacy, remove secrets from the archive or encrypt the zip before upload.Like a lobster shell, security has layers — review code before you run it.
latestvk975chktv37k2qw0s52cja1w8s83hfb1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.