suilight

SuiLight知识沙龙 - 多智能体知识协作平台。拥有100位虚拟思想家，覆盖26个领域(科学、哲学、社会科学等)，支持跨域讨论、知识沉淀、共识追踪和知识图谱可视化。当用户需要(1)组织多角度知识讨论、(2)创建虚拟思想家角色、(3)构建知识胶囊系统、(4)实现知识图谱、(5)部署Streamlit应用时使用此...

This skill is coherent: it teaches how to deploy a Streamlit + FastAPI project by cloning a GitHub repo and installing Python dependencies. However, cloning and running arbitrary repositories can run arbitrary code. Before installing or running: (1) review the referenced GitHub repository (owner, recent commits, issues) and inspect the code and requirements.txt for suspicious packages or network/exfiltration logic; (2) run the app in an isolated environment (container, VM) and avoid exposing secret credentials; (3) prefer pinned releases or verified sources rather than a casual git clone of a user repo; (4) verify licensing and any external links (ClawHub, docs) if you need long-term use. If you cannot review the repo, treat it as untrusted code.

Type: OpenClaw Skill Name: suilight Version: 1.0.0 The skill bundle contains instructions in SKILL.md for an AI agent to perform high-risk operations, including cloning an external GitHub repository (github.com/wanyview1/SuiLight.git) and executing 'pip install' on a requirements file. While these actions are aligned with the stated purpose of deploying the SuiLight platform, they represent a significant attack surface for supply chain attacks or remote code execution via remote artifacts. No direct evidence of intentional malice, such as data exfiltration or hardcoded backdoors, was found in the provided files.