Multi Unit Test Report

Generate structured markdown test reports for online English classes covering multiple units. Use when the user needs to create a student test report for rev...

Before installing or enabling this skill, note that SKILL.md instructs the agent to always read a hard-coded Obsidian mission-statement file at /Users/recom273/Library/… — a location on a local machine. That path is user-specific and is not declared in the skill metadata. Risks: the agent may try to read private notes or fail when the file doesn't exist. Recommended actions: (1) Ask the skill author to remove the hard-coded path or make the mission-statement file optional and configurable; (2) require the skill to declare any config paths it needs (or accept mission-statement text supplied at runtime); (3) inspect and/or sanitize the mission-statement file contents before allowing the skill to read it; (4) test the skill in a safe environment (or with a dummy mission statement) to confirm behavior. If you cannot get these clarifications, treat the skill as untrusted because it may access sensitive local files without explicit declaration.

Type: OpenClaw Skill Name: multi-unit-test-report Version: 1.0.0 The skill instructions in SKILL.md contain a hardcoded absolute path to a specific user's local directory (/Users/recom273/Library/Mobile Documents/iCloud~md~obsidian/...) to retrieve a 'mission statement'. This is a privacy leak and a risky behavior for an AI agent, as it encourages reading from sensitive local storage (iCloud/Obsidian) and assumes a specific host environment. While it lacks clear evidence of malicious intent like data exfiltration or remote code execution, the use of hardcoded local paths for configuration is a significant security and privacy concern.