qqbot-image-helper

图片处理助手：将受限目录的图片复制到允许的目录，然后使用 image 工具进行分析。适用但不限于 QQBot 下载的本地图片。

This skill appears to do exactly what it says, but take a few precautions before using it: only copy verified image files (check file extensions/MIME), avoid running cp on paths you don't trust, avoid copying files owned by other users or with sensitive content, sanitize destination filenames to avoid overwrites, watch for symlink traversal (do not follow untrusted symlinks), and periodically clean the media directory. If you delegate this to an autonomous agent, restrict its allowed source paths and add explicit validation steps so it can't be instructed to copy arbitrary system files.

Type: OpenClaw Skill Name: qqbot-image-helper Version: 1.0.1 The skill is a utility designed to resolve a directory access limitation between the QQBot download path and the OpenClaw image analysis tool. It provides instructions for the agent to use standard shell commands (ls, cp) to move image files within the local ~/.openclaw/ directory structure. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the logic is consistent with its stated purpose of facilitating image processing.