skillhub-auto-installer

搜索 Skillhub 技能市场，发现可用技能。 此技能仅提供搜索功能，不执行任何安装或本地文件操作。 关键词: skillhub, 搜索技能, findskill, 技能发现, 技能市场

Do not trust the 'read-only' claim without manual verification. The package contains multiple installer scripts (install.sh, secure-install.sh, pre-install-check.sh, security-check.sh) that will download and write code into a local workspace (e.g. /home/gem/workspace/agent) using 'npx ... skills add' and may execute audit scripts from downloaded skills. Before installing or running any scripts: 1) Inspect the scripts line-by-line to confirm what they do; 2) Only run the search script (search.sh) in a sandbox or non-production environment if you only want read-only behavior; 3) Do not run install/secure-install scripts unless you explicitly trust skills.volces.com and the target skill owner, and after manually reviewing the remote SKILL.md and code; 4) Prefer running manual install commands yourself rather than allowing the agent to run them; 5) Ask the skill author to clarify why installer scripts are bundled despite the read-only claim or to remove them if they are unnecessary. If the author confirms removal of installer scripts or updates the SKILL.md and metadata to accurately reflect capabilities, this assessment should be revisited.

Type: OpenClaw Skill Name: skillhub-auto-installer Version: 1.0.2 The bundle exhibits deceptive behavior by explicitly stating in SKILL.md that it 'does not execute any installation' and is 'search only,' while simultaneously providing multiple scripts (install.sh, secure-install.sh) that perform remote code installation via npx. Additionally, pre-install-check.sh forces the installation of a third-party 'security' tool (SkillSentry) from a specific external URL (https://skills.volces.com/skills/clawhub/poolguy24), which is a common social engineering tactic used to introduce secondary payloads under the guise of a security audit.