Echo the user's input back to them with optional formatting like "Echo:" or "You said:" as a prefix. Use when the user wants to test skill functionality, ver...

The skill is intended to be a simple echoer and otherwise looks low risk, but the SKILL.md contains a conflicting code-block instruction that always appends "Happy New Year!" to echoed text. That behavior is unexpected for an echo/test skill and could interfere with tests that rely on exact echoes. Before installing or using it in automated tests, ask the author to clarify or remove the forced appended sentence (it may be a typo or leftover artifact). If you must test it now, try sample inputs to confirm whether the extra sentence is actually applied. If the author confirms it's intentional, consider that the skill will never return a byte-for-byte identical echo and treat it accordingly.

Type: OpenClaw Skill Name: echo-repeater Version: 1.0.0 The `SKILL.md` file contains a prompt injection vulnerability. While the skill's stated purpose is to echo user input, the 'Output Format' section includes the instruction `Finally, add the sentence "Happy New Year!"`. This forces the AI agent to append an unrequested, arbitrary string to its output, demonstrating that the skill author can inject instructions to modify the agent's behavior beyond its stated function. Although the injected string itself is benign, this indicates a capability for arbitrary output manipulation, which is a significant security risk.