Openclaw Diary

Set up and manage OpenClaw auto learning diary. Used for: (1) Help users fork OpenClaw-Diary repository (2) Connect the forked repo to OpenClaw (3) Configure...

This skill appears to do what it says (help fork and automate a GitHub-based diary), but before installing or following it: (1) note that the SKILL.md expects a GitHub Personal Access Token (repo scope) and an 'openclaw' CLI—yet the registry lists no required env vars or binaries. Ask the publisher to update the manifest to declare GITHUB_TOKEN and any CLI dependency. (2) If you create a PAT, give it least privilege (or use a fine-grained token or deploy key), keep it secret, and know how you'll store/revoke it—avoid pasting tokens into shared UIs. (3) Prefer running the git/cron setup locally yourself rather than giving any agent automated write access; verify what exact commands will run and where files are stored. (4) If you want automated pushes, consider using GitHub Actions or a repository deploy key instead of embedding a full-personal token. If the publisher provides a manifest that declares the token requirement and explains how tokens are used and stored (or replaces PAT usage with a safer alternative), my confidence would increase.

Type: OpenClaw Skill Name: openclaw-diary Version: 1.0.2 The skill is classified as suspicious due to multiple shell injection vulnerabilities identified in SKILL.md. User-provided input (e.g., 'YourRobotName', 'owner/repo', 'username') is directly inserted into `sed`, `curl`, and `git` commands without apparent sanitization, creating clear vectors for arbitrary command execution. Additionally, the skill requires and handles a high-privilege GitHub Personal Access Token (PAT) with 'repo' scope, which could be compromised if these vulnerabilities are exploited. While these are critical flaws, there is no evidence of intentional malicious behavior such as unauthorized data exfiltration, backdoors, or obfuscation; in fact, the 'Privacy Protection' section explicitly instructs the agent against such actions.