Extract keywords and key phrases from text using Expanso Edge for SEO, tagging, and indexing purposes.

This skill runs Expanso pipelines that send your input text to an OpenAI model and also compute and emit an input_hash and trace metadata. Before installing: (1) Be aware that text you process may be sent to OpenAI — do not send sensitive data unless you are comfortable with that. (2) Provide an OPENAI_API_KEY only if you trust the key and account; note the skill's metadata marks the key optional even though the pipelines use it. (3) If you run MCP mode, the pipeline binds to 0.0.0.0 by default — run behind a firewall or bind to localhost to avoid exposing the endpoint. (4) If you need on-device privacy, investigate configuring a local backend (Ollama) instead of OpenAI, and verify the pipelines are adjusted accordingly. Finally, confirm you trust the expanso-edge/expanso-cli binaries referenced by the instructions before running them.

Type: OpenClaw Skill Name: expanso-keyword-extract Version: 1.0.0 The skill is designed to extract keywords using an OpenAI LLM. It is classified as suspicious due to inherent prompt injection vulnerabilities. User input (`content()` in `pipeline-cli.yaml` and `this.text` in `pipeline-mcp.yaml`) is passed directly to the LLM as the 'user' message, and the `MAX_KEYWORDS` variable (user-controlled) is interpolated into the 'system' prompt. While there is no evidence of intentional malicious behavior like data exfiltration or unauthorized command execution, these direct inputs to the LLM create a risk of prompt injection, which is a significant vulnerability in LLM-based applications.