📦 file-upload-cli — 临时文件分享
v1.0.0通过 CLI 将文件上传至 litterbox.catbox.moe，生成 72 小时后自动失效的分享链接，适合快速、临时共享文件。
0· 123·0 当前·0 累计
by 下载技能包
最后更新
2026/3/21
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Things to consider before installing or running this skill:
- The script requires Node.js (v14+) to run and relies on the system curl binary; the package/registry metadata did not declare these required binaries—confirm your environment meets these prerequisites.
- The SKILL.md/README contain inconsistent references (0x0.st vs litterbox.catbox.moe). The actual code posts to https://litterbox.catbox.moe/resources/internals/api.php — verify that endpoint is what you expect and that the mismatch is...详细分析 ▾
ℹ 用途与能力
The code and SKILL.md implement a Node.js CLI that uploads a single file to litterbox.catbox.moe using the system curl binary, which matches the stated purpose. However, the registry metadata lists no required binaries while the instructions and code clearly require Node.js and curl. Additionally the docs contain an inconsistent example URL format referencing 0x0.st (likely a copy/paste mistake) while the script posts to litterbox.catbox.moe.
✓ 指令范围
The runtime instructions and the included script stay within the stated scope: they validate a single user-specified file and call curl to upload it to a single third-party endpoint. The code only accesses the file path provided on the command line and does not read other files, environment variables, or credentials.
✓ 安装机制
This is instruction-only / source-included (no external install spec or remote downloads). package.json has no dependencies and there are no network downloads at install time. The risk from the install mechanism is low.
✓ 凭证需求
The skill requests no environment variables or credentials. Its behavior (upload to a public service) does not require secrets. This is proportionate to the stated purpose.
✓ 持久化与权限
The skill does not request persistent/always-on privileges and does not modify system or agent-wide configuration. It runs as a one-shot CLI invoked by the user/agent.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/21
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install file-upload-cli
镜像加速npx clawhub@latest install file-upload-cli --registry https://cn.longxiaskill.com