Windows Native Dialog

Handles native Windows file picker dialogs from WSL2 using exec and PowerShell

This skill will ask the agent to run Windows-side PowerShell commands from WSL2 that execute a local Python script. That gives the agent the ability to run arbitrary code on your Windows host and access files. Before installing or using it: (1) verify and inspect any script referenced (C:\path\to\script.py) — do not run unknown scripts; (2) prefer the skill declare required binaries (powershell.exe, python) and the exact commands it will run; (3) only enable the requested tool groups (fs/runtime) for this skill if you trust it and have reviewed the scripts; (4) consider running this workflow in an isolated/test environment rather than a primary machine. The metadata omission (no required binaries listed) and the broad runtime/fs permissions are why this skill is suspicious rather than clearly benign.

Type: OpenClaw Skill Name: windows-native-dialog Version: 1.0.2 The skill bundle instructs the OpenClaw agent to execute PowerShell commands on the Windows host from a WSL2 environment using the 'exec' tool. While the stated purpose is to handle native file picker dialogs, the use of shell execution targeting the host OS with placeholder paths (e.g., 'C:\path\to\script.py' in SKILL.md) and the request for broad tool permissions (tools.allow) represent a high-risk execution pattern. No clear evidence of malicious intent was found, but the approach bypasses standard security boundaries between the container/WSL and the host.