技能商店客户端

技能商店客户端，支持查询在线技能、一键下载安装技能包

This package does what it claims (query a local skill store and install skill archives), but it contains risky behaviors you should consider before installing or running it: - Unsafe archive extraction: zipfile.extractall and tarfile.extractall are used without any path sanitization; specially crafted archives can overwrite files anywhere the process can write. Treat downloads as untrusted data. - Hardcoded install path: it writes to /root/.openclaw/workspace/skills/, which assumes root and a specific layout. Run as a non-privileged user and change SKILLS_DIR to a safer location. - No integrity checks: downloaded packages are not validated (no signatures or checksums). An attacker controlling the shop endpoint can supply malicious packages. - External commands: RAR extraction invokes the system 'unrar' binary; that executes external code and may have its own risks. Recommendations before use: - Only point SHOP_BASE_URL to a shop you control and trust (default is localhost). Verify the server endpoint and run it in a secure environment. - Don't run this as root. Change SKILLS_DIR to a dedicated non-root directory you control. - Add or require package signatures/checksums and validate them before extraction. - Replace extractall with safe extraction that prevents path traversal, or validate archive entries before writing. - Audit any skill packages you install before executing them. Given these issues, treat the skill as suspicious until the extraction and path/config practices are fixed or until you can audit the shop and packages it will download.

Type: OpenClaw Skill Name: skill-shop Version: 1.0.1 The skill bundle functions as a 'Skill Shop' client that downloads, extracts, and installs executable code from a local server (127.0.0.1:8080) into a sensitive system directory (/root/.openclaw/workspace/skills/). It is highly vulnerable to path traversal attacks (ZipSlip) because main.py lacks sanitization when extracting ZIP/TAR archives, and it automatically grants execution permissions (chmod 755) to downloaded scripts without any signature verification or integrity checks. While these represent critical security flaws that could lead to arbitrary code execution, there is no clear evidence of intentional malice or data exfiltration.