Skillstore

Search, install, and create OpenClaw skills using intelligent matching across built-in, local, and GitHub skill repositories.

This skill appears to do what it says: search built-in/local/GitHub skills and install/create skills. Before installing or using it, review the main.js install/exec logic (look for exactly what commands it runs when installing a GitHub repo). Expect the CLI to read sibling skill directories (it scans SKILL.md/README.md), and expect it to write a local config.json in the skill directory. When installing a skill from GitHub, manually inspect the repo (or test in an isolated environment) because installers commonly shell out and may run repo-provided scripts. Also note the docs claim a different local-skill path (~/.openclaw/...) than the code uses — verify where it will actually search on your system if that matters.

Type: OpenClaw Skill Name: skillstore Version: 1.0.0 The `main.js` file contains a critical shell injection vulnerability (RCE) in the `installFromGitHub` function. It uses `child_process.exec` with unsanitized `repo` and `name` variables, which are directly sourced from GitHub API responses. A malicious GitHub repository with a crafted name could exploit this to execute arbitrary commands on the system when a user attempts to install it. Additionally, the `createNewSkill` function, when invoked via `skillstore create <name>`, is vulnerable to code injection as it embeds the unsanitized `<name>` argument directly into the generated `main.js` template, allowing for arbitrary code to be injected into newly created skills.