skill-forge

A comprehensive tool for creating, documenting, wrapping, and quality-checking professional-grade skills with standardized templates and best practices.

This skill appears to do what it says (create, document, and package skills), but exercise caution before running it on a machine you care about. Key things to consider: - Review the scripts before running. The CLI uses execSync to run shell commands and package managers. If you plan to run 'install-deps' or similar commands, inspect _meta.json for any untrusted skill directories first. - Command-injection risk: dependency names from metadata are interpolated into shell commands without sanitization. Do not run this tool on data from untrusted sources or unreviewed _meta.json files. - Privilege escalation: installDependency invokes apt/winget/brew and may use sudo. Run in a sandbox or container (or without install commands) if you want to evaluate it safely. - OpenClaw hook is benign (console reminders) but only enable it if you trust the code; it will run periodically in sessions where hooks are enabled. If you want higher confidence: ask the author for an explicit review/fix that escapes/sanitizes dependency names and avoids shell command concatenation (use execFile/spawn with argument arrays and no shell), or run the tool in an isolated VM/container and avoid running the automatic install features.

Type: OpenClaw Skill Name: skill-forge-va Version: 1.3.0 The skill bundle provides a CLI tool ('skill-creator.js') for scaffolding, packaging, and managing OpenClaw skills, including features for wrapping existing binaries and installing system dependencies. It is classified as suspicious because it makes extensive use of 'child_process.execSync' to execute system commands (e.g., 'apt-get', 'brew', 'winget', 'xcopy', and PowerShell's 'Compress-Archive') using unsanitized string interpolation of user-provided arguments like 'skillName' and 'dependency'. This creates a high risk of shell injection and Remote Code Execution (RCE) if the AI agent is prompted to use malicious inputs. While the tool includes a 'detect-malware' command and its functionality aligns with its stated purpose, the lack of input validation for powerful system operations is a significant security flaw.