Skip to main content

tencent-cloud-cos

Integrates Tencent Cloud Object Storage for file management and image processing, enabling efficient cloud operations and smart searches.

Install this skill

or
51/100

Security score

The tencent-cloud-cos skill was audited on Mar 8, 2026 and we found 17 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 91

Access to hidden dotfiles in home directory

SourceSKILL.md
91- 创建/更新 `~/.mcporter/mcporter.json`,写入 cos-mcp 服务器配置
medium line 92

Access to hidden dotfiles in home directory

SourceSKILL.md
92- 将凭证写入 shell 配置文件(`~/.zshrc` 或 `~/.bashrc`),重启后仍可用
medium line 118

Access to hidden dotfiles in home directory

SourceSKILL.md
118**判断方式一(mcporter)**:`which mcporter` 且 `cat ~/.mcporter/mcporter.json | grep cos-mcp` 有输出。
low line 136

Access to hidden dotfiles in home directory

SourceSKILL.md
136mcporter call cos-mcp.<tool_name> --config ~/.mcporter/mcporter.json --output json [--args '<JSON>']
low line 141

Access to hidden dotfiles in home directory

SourceSKILL.md
141mcporter list cos-mcp --config ~/.mcporter/mcporter.json --schema
medium line 144

Access to hidden dotfiles in home directory

SourceSKILL.md
144**判断 mcporter 是否可用**:`which mcporter` 且 `~/.mcporter/mcporter.json` 包含 cos-mcp 配置。
medium line 158

Access to hidden dotfiles in home directory

SourceSKILL.md
158> 以下示例同时展示两种调用格式。mcporter 格式省略公共前缀 `mcporter call cos-mcp.` 和 `--config ~/.mcporter/mcporter.json --output json`。
medium line 159

Access to hidden dotfiles in home directory

SourceSKILL.md
159> 完整 mcporter 命令:`mcporter call cos-mcp.<tool> --config ~/.mcporter/mcporter.json --output json --args '<JSON>'`
low line 165

Access to hidden dotfiles in home directory

SourceSKILL.md
165mcporter call cos-mcp.putObject --config ~/.mcporter/mcporter.json --output json --args '{"filePath":"/path/to/file.jpg","targetDir":"images"}'
medium line 285

Access to hidden dotfiles in home directory

SourceSKILL.md
285当方式一和方式二均不可用时使用。配置持久化在 `~/.cos.conf`。
medium line 348

Access to hidden dotfiles in home directory

SourceSKILL.md
3482. **mcporter 调用必须带** `--config ~/.mcporter/mcporter.json` 和 `--output json`
low line 69

External URL reference

SourceSKILL.md
69> 你可以在 [腾讯云控制台 > 访问管理 > API密钥管理](https://console.cloud.tencent.com/cam/capi) 获取密钥,
low line 70

External URL reference

SourceSKILL.md
70> 在 [COS 控制台](https://console.cloud.tencent.com/cos/bucket) 查看存储桶信息。
low line 174

External URL reference

SourceSKILL.md
174putObjectSourceUrl sourceUrl="https://example.com/image.png" targetDir="images"
low line 212

External URL reference

SourceSKILL.md
212imageSearchPic uri="https://example.com/query.jpg"
low line 238

External URL reference

SourceSKILL.md
238> 官方文档: https://www.tencentcloud.com/zh/document/product/436/8629
low line 283

External URL reference

SourceSKILL.md
283> 官方文档: https://www.tencentcloud.com/zh/document/product/436/10976
Scanned on Mar 8, 2026
View Security Dashboard
Installation guide →
GitHub Stars 2.2K
Rate this skill
Categorydevelopment
UpdatedApril 4, 2026
openclaw/skills