Plan I

启动一个新的规划流程，创建新的规划文件。

This skill mostly does what it says: it creates a new planning markdown and expects the agent to write an initial draft into that file. Before installing or using it, consider the following: - Input sanitization risk: pl-init.sh uses the raw plan name to construct the filename. A malicious or malformed plan name (containing ../ or other special characters) could cause unexpected file paths; the script does not sanitize or validate names. Prefer rejecting names with slashes, dots, or shell metacharacters or update the script to sanitize/normalize the name. - Immediate write behavior: the skill mandates writing the user's draft to disk before responding. Ensure you are comfortable with the agent persisting the user's input and any derived content without an additional confirmation step. - Ambiguous disable-model-invocation flag: SKILL.md includes disable-model-invocation: true while the instructions require generating content from user input. Verify how your platform treats this flag — it might block the model-based generation the skill expects. - Safe scope: the script does not contact the network and checks for existing files before creating a new one (it aborts on conflict), which is good. Still, review the script and run it in a safe environment first (or patch it to sanitize names) if you plan to use it on sensitive systems. If you need to proceed: (a) patch pl-init.sh to validate/sanitize plan names (e.g., allow only [a-z0-9-]), (b) confirm platform behavior for disable-model-invocation, and (c) optionally add an explicit consent/confirmation step before persisting sensitive content.

Type: OpenClaw Skill Name: plan-i Version: 0.1.9 The skill bundle is designed to initialize project planning documents by executing a bash script (scripts/pl-init.sh) that creates a directory and a template markdown file. The script contains a potential path traversal vulnerability because it uses the user-provided plan name directly in a file path without validation. Although the SKILL.md instructions direct the AI to sanitize the input, the lack of script-side validation is a security flaw, warranting a suspicious classification per the provided guidelines regarding vulnerabilities.