Use Soulseek to Chat and Share Files

Use Soulseek to search, download, and share files, chat in rooms or privately with users via its GUI or CLI tools.

This skill appears to be what it says — instructions for installing and using Soulseek — but be cautious before proceeding. Practical points: - The SKILL.md asks you to download and run executables (Windows .exe, macOS .dmg, Linux .AppImage). Only download from the official project pages and verify checksums/signatures when available. - The CLI instructions tell you to export SOULSEEK_ACCOUNT and SOULSEEK_PASSWORD, but the skill metadata does not declare these as required env vars. Treat this as an oversight: avoid putting real passwords into shell env vars that might get logged; use a secrets manager or temporary account if possible. - Be careful what directories you share; P2P file sharing can accidentally expose personal files. - If you plan to use the CLI or libraries, prefer creating a throwaway account, and run the client in a sandboxed environment (VM/container) if you are concerned about running third-party binaries. - If you want higher assurance, ask the skill author to update the metadata to declare the required env vars and to add guidance on verifying downloads (checksums/GPG) and safer credential handling.

Type: OpenClaw Skill Name: use-soulseek Version: 1.0.2 The skill bundle provides instructions for installing and using Soulseek, a peer-to-peer file sharing and chat application. All external links point to the official Soulseek website or legitimate open-source projects on GitHub. The instructions for the AI agent are clear, directly related to the stated purpose, and even include a warning against leaking personal data. There is no evidence of prompt injection, malicious execution, data exfiltration, or other harmful behaviors. The commands provided (e.g., `chmod`, `sudo apt install`, `npm install`) are standard for software installation and configuration, and are not used for malicious intent.