MLOps Prototyping CN

Structured Jupyter notebook prototyping with pipeline integrity

This skill appears coherent and low-risk: it runs a local script that reads a notebook file and prints checks. Before installing/running: (1) ensure python3 is available on the machine, (2) review scripts/check-notebook.sh yourself if you want to confirm behavior, (3) run it on non-sensitive copies of notebooks until you are comfortable with its heuristic false positives (its 'magic number' and import-detection heuristics are simplistic), and (4) be aware the wrapper prints a final 'Notebook check complete' message even when the internal check failed, so rely on the script's exit code rather than that message for CI gating.

Type: OpenClaw Skill Name: mlops-prototyping-cn Version: 1.0.0 The `scripts/check-notebook.sh` file contains a critical shell injection vulnerability. The `$NOTEBOOK` variable is directly interpolated into a heredoc passed to `python3`, allowing arbitrary command execution if an attacker can control the input to this script (e.g., `NOTEBOOK="foo.ipynb$(id)"`). Additionally, it allows arbitrary file reading via path traversal if the target is a regular file. While this is a severe vulnerability, there is no evidence of intentional malicious behavior such as data exfiltration, persistence, or backdoors; the script's stated purpose is to check notebook structure.