openclaw-with-vscode

Bridge between OpenClaw and VS Code Copilot — dispatch coding tasks from any OpenClaw channel to VS Code for execution.

This skill itself is a simple local forwarder and does not ask for secrets, but exercise caution before enabling it: 1) Verify the OpenClaw Chat VS Code extension is legitimate (marketplace publisher, source code, reviews). 2) Understand Copilot/Copilot Chat will contact GitHub services using your Copilot credentials — do not forward secrets or private keys in prompts. 3) The skill allows prompts that can cause file edits and run commands in your editor; require user confirmation for any destructive actions. 4) If you need stronger guarantees, avoid using this skill for sensitive code or inspect the extension behavior and logs (network calls) before trusting it. 5) If you want lower risk, restrict the agent so it cannot autonomously invoke the skill without explicit user approval.

Type: OpenClaw Skill Name: openclaw-with-vscode Version: 1.0.0 The skill bundle facilitates a bridge to VS Code but contains a potential shell injection vulnerability in SKILL.md, where user-provided prompts are inserted into a curl command template without explicit sanitization instructions. It also directs the agent to perform high-privilege actions, such as installing a VS Code extension (wodeapp.openclaw-chat) and communicating with a local server on port 19836. While the traffic is restricted to localhost, the combination of high-privilege IDE access and the risk of command injection via the agent's execution of shell commands makes this bundle risky.