Startup Guide

창업/사업자 지원 스킬. 9개 인텐트 라우팅(Startup Checklist~Beginner Guide), 업종별 허가·신고 + 정책자금 + 사업자 등록 + 개인 vs 법인 비교. 트리거: "창업", "사업자 등록", "허가", "신고", "정책자금", "창업지원금", "개인사업자...

This skill appears internally consistent: it classifies startup-related intents and delegates data collection to other domain skills and public web searches. Before enabling it, check the reputation and permissions of the linked skills (company-info, tax-guide, law-search, korean-gov-programs, welfare-guide) because those delegated skills are the ones that may need API keys or access to official data sources. Note the publisher is unknown and there is no homepage — consider enabling in a limited/test environment first and verify that delegation paths (the referenced scripts and connectors) point to trusted, installed skills rather than arbitrary paths. Finally, remember the skill's outputs are informational only (it includes a disclaimer) and not a substitute for professional legal/tax advice.

Type: OpenClaw Skill Name: startup-guide Version: 1.0.0 The skill bundle is classified as suspicious due to a significant shell injection vulnerability identified in `playbook.md`. It instructs the AI agent to execute `bash` scripts (`skills/law-search/scripts/law_search.sh` and `skills/company-info/scripts/biz_status.sh`) by directly embedding user-provided input (e.g., `[업종]`, `[사업자번호]`) into the command arguments. If the AI agent does not rigorously sanitize this user input before execution, it could lead to Remote Code Execution (RCE) on the host system, allowing an attacker to run arbitrary commands.