📦 123pan upload and share — 123云盘上传分享
v1.0.4一键将文件上传至123云盘并生成可分享链接，支持短链与权限设置，适合快速分发大文件。
0· 396·0 当前·0 累计
by @solarise94下载技能包
最后更新
2026/3/17
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill is internally consistent with its stated purpose, but take these precautions before installing: (1) Source is unknown — review the included scripts yourself or run them in a sandbox if you don't trust the author. (2) Do not place unrelated credentials in your default rclone config: set RCLONE_CONFIG to an isolated file and only put 123pan credentials there, or use environment variables. (3) Provide only a 123pan API token with the minimal required scope (don't reuse broad or highly pr...详细分析 ▾
✓ 用途与能力
Name/description, manifest, SKILL.md and code all consistently implement 123pan uploads (API for <1GB, chunked uploads, WebDAV/rclone for large files). Required env vars (PAN123_ACCESS_TOKEN, PAN123_DIRECT_FOLDER_ID, optional WebDAV creds) match the stated functionality and no unrelated credentials or external services are requested.
ℹ 指令范围
Runtime instructions and code stay within the upload/share workflow (calling 123pan API endpoints and WebDAV/rclone). The SKILL.md explicitly warns about rclone config leaking other cloud credentials and recommends using an isolated RCLONE_CONFIG. Note: the scripts will read local config.json (in the skill) and may read ~/.config/rclone/rclone.conf if RCLONE_CONFIG is not set; webdav script also inserts the user's local site-packages path to sys.path to import webdav3. These behaviors are relevant to scope and are documented but worth attention.
ℹ 安装机制
No install spec (instruction-only installation), which means the included Python scripts will run directly. The package does not auto-download code from arbitrary URLs. However, the manifest/README do not fully enumerate Python dependencies (requests is mentioned; webdav3 is used but not listed in manifest). The scripts call subprocesses (rclone) and expect rclone to be present or at a default path; they do not auto-install rclone.
✓ 凭证需求
Environment variables requested are proportional and specific to the 123pan use case: PAN123_ACCESS_TOKEN and PAN123_DIRECT_FOLDER_ID are required; PAN123_WEBDAV_USER/PASS, RCLONE_BIN and RCLONE_CONFIG are optional and justified for WebDAV/rclone flows. There are no unrelated tokens/keys requested.
✓ 持久化与权限
The skill is not marked always:true and is user-invocable. It does not request permanent platform-wide privileges or modify other skills. It executes user-local commands (Python, rclone) at runtime as expected for an uploader.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.42026/3/2
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install 123pan-upload
镜像加速npx clawhub@latest install 123pan-upload --registry https://cn.longxiaskill.com