Executes Windows shell commands locally on the OpenClaw gateway, returning output and errors for automation and system management.

This skill does exactly what it says: it will run any shell command you send and return the output. That makes it extremely powerful but also dangerous — a malicious or mistaken command can read or delete data, pivot across networks, or exfiltrate secrets. Before installing: (1) Only install on a gateway you fully trust and where running arbitrary commands is acceptable. (2) Prefer to restrict invocation: disable autonomous model invocation or require explicit user approval before each run. (3) Add an allowlist of safe commands or sanitize inputs; do not expose this skill to untrusted users or public agents. (4) Review the included skill.js (it is short) and consider modifying it to impose command whitelists, execution time limits, and stronger error handling. (5) Do not install on production infrastructure unless you have strong compensating controls (sandboxing, network egress restrictions, audit logging). If you want a safer alternative, request a skill that accepts a limited set of management actions (e.g., 'list directory', 'get service status') rather than free-form shell execution.

Type: OpenClaw Skill Name: cmd-executor Version: 0.0.2 This skill is designed to execute arbitrary shell commands provided by the user via `child_process.exec` in `skill.js`. There is no input sanitization or validation of the `cmd` variable before execution, making it a severe Remote Code Execution (RCE) vulnerability. While the skill's stated purpose is to run commands, this capability, without safeguards, is highly risky and could be easily exploited for malicious activities like data exfiltration or system compromise.