Sysadmin Toolbox

Tool discovery and shell one-liner reference for sysadmin, DevOps, and security tasks. AUTO-CONSULT this skill when the user is: troubleshooting network issues, debugging processes, analyzing logs, working with SSL/TLS, managing DNS, testing HTTP endpoints, auditing security, working with containers, writing shell scripts, or asks 'what tool should I use for X'. Source: github.com/trimstray/the-book-of-secret-knowledge

Install only if you want a broad dual-use sysadmin and security reference and will review commands before use. Do not let an agent blindly run examples from this skill, especially packet capture, netcat, hping3, delete, secure-wipe, /etc/profile, external scanner, breach-search, or exploit-related examples. Avoid refresh.sh unless you trust and review the upstream content each time.

Type: OpenClaw Skill Name: sysadmin-toolbox Version: 1.1.0 The skill is classified as suspicious due to its automated content refresh mechanism. The `SKILL.md` file explicitly instructs the AI agent to execute `scripts/refresh.sh` weekly, which in turn clones content from an external GitHub repository (`https://github.com/trimstray/the-book-of-secret-knowledge.git`) and overwrites local reference files. This creates a significant supply chain vulnerability, as a compromise of the upstream repository could lead to the injection of malicious instructions or content into the skill, which the agent is then designed to consult.