Openclaw Pii Anonymizer Latest

Automation skill for Openclaw Pii Anonymizer Latest.

This skill is a small shell wrapper that sends text to an Ollama model to replace PII; it reasonably requires curl and jq and an Ollama endpoint. Before installing: (1) ensure OLLAMA_URL points to a local or trusted Ollama server (default is localhost) — do not set it to an untrusted remote host because the script will transmit whatever text you pass in; (2) confirm curl and jq are available; (3) note the registry metadata mismatch (the skill's SKILL.md declares required env/bins while registry metadata lists none); (4) if you plan to allow autonomous invocation, restrict or review what data the agent will send through this anonymizer to avoid accidental leaks to an external endpoint.

Type: OpenClaw Skill Name: openclaw-pii-anonymizer-latest Version: 1.0.2 The skill contains a critical shell command injection vulnerability in 'privacy-anonymize.sh'. The script expands the input variable '$1' directly inside a double-quoted string passed to 'curl -d', which allows for arbitrary command execution if the input contains shell metacharacters like '$(...)' or backticks. While the stated purpose of PII anonymization is benign, the instructions in 'SKILL.md' encourage the agent to pass potentially untrusted data (from memory or tool outputs) into this script, creating a high-risk vector for remote code execution (RCE).