super-weiyun-skill
v1.0.0This skill should be used when the user needs to manage Tencent Weiyun cloud storage, including file upload/download, sharing, space management, and account...
⭐ 0· 15·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Weiyun cloud management) matches the delivered code: login.py, client.py, main.py, utils, README and SKILL.md implement QR/cookie login, uploads/downloads, sharing, and space operations. No unrelated binaries, services, or credentials are requested.
Instruction Scope
SKILL.md instructs the agent/user to use the included Python scripts and to provide/obtain Weiyun cookies or scan a QR code; runtime actions are limited to contacting Weiyun and QQ/ptlogin endpoints and reading/writing a local cookies.json. This is within scope, but note the skill persists authentication cookies locally (cookies.json) and saves QR PNG files in the working directory — these are sensitive session tokens that grant account access.
Install Mechanism
Metadata states 'No install spec' (instruction-only), and indeed there is no automated installer. However the bundle includes Python source files and a requirements.txt (requests, qrcode, tabulate). This is coherent but means users must manually install dependencies (pip). There are no downloads from unknown URLs or extract operations in an installer.
Credentials
The skill requests no environment variables or external credentials in metadata. It legitimately relies on user-provided session cookies or QR-based login — appropriate for a web client. There are no requests for unrelated credentials or system secrets. Reminder: browser cookies saved by this tool are sensitive and should be protected.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. Its persistence is local (cookies.json and saved QR image) and scoped to its own files; this is expected for a client that stores session state.
Assessment
This skill appears to be what it says: a Python toolkit for Tencent Weiyun. Before installing or running: 1) Inspect the code if possible (it uses only requests and QQ/Weiyun endpoints). 2) Be aware cookies.json contains session cookies — treat it like a password, store it securely or delete when done. 3) There is no automated installer; run pip install -r requirements.txt in a controlled environment (virtualenv/container). 4) The tool saves QR images and cookies to the current working directory; run it from a directory you control. 5) If you need stronger isolation, run the scripts inside an ephemeral VM or container. 6) Note: SKILL.md contains a stray odd phrase (likely accidental) but this does not change the code behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk972dpgm7ngea18t8hxqa7my3d84jgaf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.