SkillScout

Find and evaluate OpenClaw AI skills by trust score and security reviews before installation or recommendation.

What to consider before using or installing SkillScout: - Treat the repo as potentially active code: although SKILL.md is brief, the project includes scripts and a server package that will fetch code and write files. Do not run anything blindly. - SKILL.md examples use curl, python3, and npx, but the registry metadata lists no required binaries. If you plan to follow examples, ensure those tools are available and inspect any remote URLs first. - The catalog is hosted on an external static site (https://nashbot67.github.io/...). Verify you trust that domain and the JSON it serves before piping it into commands. If possible, fetch and inspect the JSON locally instead of executing it immediately. - The project claims an isolated, read-only review agent, but the repo contains fetch-and-write scripts — confirm how the review agent is actually invoked and whether network access is used in your environment. - If you want to run the MCP server (npx @skillscout/mcp): inspect the package on npm (confirm publisher identity), review its code, and run it in a sandbox or ephemeral environment first. - Prefer manual code review of the scripts (fetch-skill.sh, review-skill.sh, harden-skill.sh, mcp-server) before executing them. Look for any commands that download archives, run installs, or execute unverified code. If you want, I can: - List the exact shell commands and files in the repo that perform network or filesystem operations. - Extract and show the curl/npx/python usage lines so you can inspect the remote endpoints before running them. - Suggest a safe sequence to test the tool in a sandbox (Docker container) and what to watch for.

Type: OpenClaw Skill Name: skillscout Version: 0.1.0 The SkillScout bundle, despite its stated goal of enhancing security, contains several critical vulnerabilities. The `SKILL.md` file includes a `curl | python3 -c` command that is vulnerable to remote code execution if the remote JSON file is compromised or if the `QUERY` argument is maliciously crafted. Furthermore, the `scripts/fetch-skill.sh` script is susceptible to shell injection and path traversal via unsanitized user input when constructing `gh api` commands and `curl` URLs. Both `mcp-server/index.js` and `mcp/server.js` generate `npx clawhub@latest install` commands with unsanitized skill names, creating a prompt injection vector against any agent that executes their output. These flaws could lead to arbitrary code execution on the host system, classifying the bundle as suspicious due to severe vulnerabilities, not intentional malice.