The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs the official @baiducloud/sdk package from the npm registry using the provided setup.sh script.
[CREDENTIALS_UNSAFE]: The skill facilitates the configuration of Baidu Cloud credentials (AccessKeyId and SecretAccessKey). It correctly handles secret management by persisting them to ~/.config/openclaw/baidu-cloud-bos/credentials.json with secure file permissions (read/write only for the owner).
[INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection because it ingests data from an external object storage service (file names, metadata, and content). However, the scripts included (setup.sh) implement defensive input validation using regular expressions to sanitize parameters before they are passed to shell commands.
[COMMAND_EXECUTION]: The skill executes the official bcecmd utility and Node.js scripts to perform storage operations. The execution is scoped to the intended functionality of managing cloud storage.

baiducloud-bos