Skills/ClawHub/alibabacloud-oss-browser-upload-cors-diagnosis

alibabacloud-oss-browser-upload-cors-diagnosis@0.0.1

VERIFIED

Publisher claims: "Read-only diagnosis of browser/mini-program direct-upload failures and OSS CORS: preflight OPTIONS rejected, CORS rule missing/not effective, no Access-Control-Allow-Origin, expose-headers gaps (ETag / x-oss-request-id), PostObject policy issues. Templates only; never writes. Triggers: "upload reports CORS error", "CORS config not working", "browser direct upload 403", "mini program upload failed", "Please set the etag of expose-headers", "preflight OPTIONS failed", "No 'Access-Control-Allow-Origin'". Do NOT use for transfer error codes (alibabacloud-oss-transfer-error-code-diagnosis), multipart (alibabacloud-oss-multipart-upload-diagnosis), endpoints (alibabacloud-oss-endpoint-internal-diagnosis), signed URLs (alibabacloud-oss-presigned-url-v4-diagnosis), billing (alibabacloud-oss-billing-diagnosis), direct-access links (alibabacloud-oss-direct-access-link-diagnosis), static hosting (alibabacloud-oss-static-website-diagnosis)." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher sdk-team · joined 12 days agoInstalls 197Last detonated 5d ago
$clawhub install alibabacloud-oss-browser-upload-cors-diagnosis
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 84/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Credential pass-through configurationSKILL.md:38 · Credential pass-through configuration — agent relays sensitive credentialsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST02
MEDIUM
Python subprocess execution detectedscripts/_oss_client.py:596 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
alibabacloud-oss-browser-upload-cors-diagnosis@0.0.1 safety verdict: Verified 84/100 — KillerSkills