Mobb Vulnerabilities Fixer

Scan, fix, and remediate security vulnerabilities in a local code repository using Mobb MCP/CLI. Use when the user asks to scan for vulnerabilities, run a security check, auto-fix issues, remediate findings, or apply Mobb fixes (e.g., \"scan this repo\", \"fix security issues\", \"remediate vulnerabilities\", \"run Mobb on my changes\").

This skill appears to do what it says: it drives your local Mobb MCP/CLI to scan a repository and apply fixes but expects you to (1) run and trust the MCP service/tool locally, (2) provide or configure a Mobb API key or complete the browser login flow yourself, and (3) review and explicitly approve any patches before they are applied. Before installing/invoking: ensure your local MCP binary/server is from a trusted source, be prepared to authenticate via the browser flow or set an API key locally (the skill's docs are slightly inconsistent about whether the agent should read env vars), and do not allow the skill to auto-apply fixes without your explicit consent. If you want greater assurance, ask the skill author to clarify which environment variables it reads, or require the agent to only accept credentials that you paste into the session at runtime rather than reading them from the environment automatically.

Type: OpenClaw Skill Name: mobb-vulnerabilities-fixer Version: 0.1.2 The skill is designed to use a pre-installed and user-managed Mobb MCP server for vulnerability scanning and fixing. The instructions in `SKILL.md` and `mobb-auth.md` explicitly prohibit the agent from reading environment variables directly, installing/launching the MCP server, or applying fixes without explicit user consent. These safeguards, combined with the rejection of path traversal and clear instructions for user interaction, indicate a strong focus on transparency and user control, with no evidence of malicious intent or high-risk behaviors beyond the stated purpose.