Proof-of-Quality - BTC PoW Verifiable Excellence

BTC PoW grind nonce till skill/output benchmark score > threshold. Verifiable excellence for antifragile meritocracy—no hype, pure quality proof. Use for skill evaluation, fork scoring, collab verification.

This skill appears to do what it says: a local PoW grinder over a skill file. Before installing or scheduling it: (1) ensure Node.js is available — metadata does not declare Node as required; (2) run with a small difficulty/threshold first to confirm behavior; (3) be aware the nonce loop is unbounded and can consume a lot of CPU — run in a sandbox, container, or with job limits if you plan cron runs; (4) only pass file paths you trust (it will read any file path you supply); (5) understand the implementation is a toy SHA-256 PoW, not real Bitcoin mining. If any of these are unacceptable, review/modify the JS or metadata before enabling.

Type: OpenClaw Skill Name: proof-of-quality Version: 1.0.0 The skill is classified as suspicious due to two main reasons. First, the `poq.js` script uses `fs.readFileSync` to read files specified by a `skillPath` argument, which defaults to `../molt-security-auditor/SKILL.md`. This allows local file access outside the skill's own directory, posing a risk of arbitrary file disclosure if the agent's input validation is insufficient. Second, the `SKILL.md` contains an instruction for the agent to set up a cron job (`cron every=6h: PoQ skills.`), which is a form of persistence, even if its stated purpose is to periodically run the skill's 'Proof-of-Quality' process.