Skill

File share

Automation skill for File share.

Verified: 2026-05-15 (clawhub-ingest-2026-05-15+enrich-capability-skill)

When to use File share

Choose if

You need an agent to upload a workspace artifact (log, report, generated media) to a transient public URL without provisioning auth or storage. The skill validates paths against the workspace root to block directory traversal and returns a direct download URL via transfer.whalebone.io.

Avoid if

The file is sensitive, must persist beyond the upload service's expiry, or needs access control — there is no auth on the resulting URL and the catalog has flagged the skill as suspicious. Use an authenticated object store (S3, R2) for anything you wouldn't post publicly.

Risk Flags

  • MEDIUM security ClawHub catalog flags this skill with a "suspicious" moderation verdict (reason suspicious.llm_suspicious). Review the SKILL.md and Python transfer script before allowing an agent to upload arbitrary workspace files.
  • MEDIUM scope Uploads to transfer.whalebone.io which expires files after a vendor-set period (README says to check the vendor policy). Not suitable for durable storage. No authentication on uploads means anyone with the URL can download.
  • LOW runtime Requires `curl` on the host. README notes curl is pre-installed in most environments; the implementation also uses a Python helper script.

Cost

Type: Free

Distribution

ClawHub
file-share
License
MIT-0