office-quotes

Generate random quotes from The Office (US). Provides access to 326 offline quotes plus online mode with SVG cards, character avatars, and full episode metadata via the akashrajpurohit API. Use for fun, icebreakers, or any task requiring The Office quotes.

This skill appears to do what it claims (produce quotes and images). Before installing, consider: 1) It can call a third-party API (officeapi.akashrajpurohit.com) — don't use it if you need strictly offline operation; use the local mode instead. 2) Converting SVG→PNG may launch Playwright/Chromium and/or download browser binaries (resource and network activity) — the SKILL.md doesn't document that extra step. 3) The Python helpers fetch arbitrary SVG URLs (they will make network requests to whatever URL you pass). 4) If you want extra assurance, review the npm package on the public registry and the referenced GitHub repo (github.com/gumadeiras/office-quotes-cli) and inspect the package.json/dependencies for unexpected telemetry or leftover tooling. If you have strict network or resource policies, run in local/offline mode or audit the package and its dependencies first.

Type: OpenClaw Skill Name: office-quotes Version: 1.2.3 The skill is classified as suspicious due to the import of `child_process.execSync` in `scripts/office-quotes.js`, which grants the capability for arbitrary command execution, even though it is not currently utilized in the provided code. Additionally, the script uses `playwright` to launch a full Chromium browser instance for SVG rendering, which is a powerful and resource-intensive operation that significantly expands the attack surface, despite being used for a plausible purpose (image conversion). While the skill's stated purpose is benign, these high-risk capabilities prevent a 'benign' classification.