Drive File Relay

Copy (relay) a local file from this machine into Google Drive for desktop (GoogleDriveFS) so it can be downloaded from a phone when the phone is not on the s...

This skill's purpose is reasonable, but the runtime instructions reference running 'scripts/drive_relay.ps1' with PowerShell -ExecutionPolicy Bypass while the package contains no script—that is the main red flag. Before installing/using: 1) Do not run anything that uses ExecutionPolicy Bypass without inspecting the script; require the exact script file and review its contents for unsafe behavior. 2) Ask the publisher for the missing scripts or provide your own trusted implementation; do not fetch and run a script from an unknown URL. 3) Restrict the skill to Windows hosts (it assumes G: and PowerShell) or update the metadata to avoid accidental runs on other OSes. 4) Limit which local paths the agent may access and require explicit user confirmation for each file to avoid accidental exfiltration of sensitive files. 5) Test with a small harmless file first. If you cannot obtain and audit the referenced PowerShell script, treat this skill as incomplete and avoid enabling it.

Type: OpenClaw Skill Name: neo1307-drive-file-relay Version: 1.0.0 The skill is designed to copy local files to a Google Drive for desktop mount point to facilitate access from mobile devices. The instructions in SKILL.md include file integrity verification (SHA256) and explicitly prohibit the use of external APIs or curl for messaging, which mitigates data exfiltration risks. While the referenced PowerShell script (scripts/drive_relay.ps1) was not provided, the agent instructions are transparent, logical, and lack indicators of malicious intent or prompt injection.