OneScience-Skills

OneScience 技能管理器，提供热点模型、数据集和组件内容，将用户需求转化为结构化流程，并自动编排调用相关 OneScience 技能。当用户使用 OneScience 模式开发代码、读取数据、训练模型或执行研究项目时，自动路由到正确的技能组合。

This skill package mostly contains detailed workflow and orchestration instructions, but pay close attention to the installer instructions that require reading your local ~/.ssh/config and automatically SSH-ing into your remote hosts to run installs and commands. Before installing or enabling this skill: - Do not allow the agent to run commands that read ~/.ssh/config or any other private files unless you explicitly approve each command and understand which host(s) will be contacted. - Treat the installer as high-risk: prefer to perform remote install steps manually (follow the documented commands yourself on your remote host) rather than granting the agent permission to access SSH configuration or connect for you. - Ask the skill author for provenance (source, homepage) and for an installer variant that only outputs the exact commands for a human to run locally, instead of performing them automatically. - If you decide to use the installer via the agent, require an explicit, interactive confirmation step for: (1) reading ~/.ssh/config, (2) selecting a Host, and (3) every remote command to execute — and ensure the agent will not exfiltrate hostnames/keys to external endpoints. - Verify any SCNet/SCNET MCP submission workflow: the skill references submitting files to a cluster but does not declare how credentials are provided—ensure you control credentials and do not paste secrets into chat. If you want, I can: (A) produce a safe, read-only checklist version of the installer steps that the agent can present as instructions for you to run manually on your remote host, or (B) draft a redacted installer SKILL.md that removes automatic local ~/.ssh/config reads and SSH commands and instead requests explicit host and credential input before any network action.

Type: OpenClaw Skill Name: onescience-skills Version: 1.0.2 The bundle provides a comprehensive framework for scientific AI research (OneScience), but contains high-risk instructions in `onescience-installer/SKILL.md` that command the agent to read the user's local `~/.ssh/config` file to identify remote hosts. Additionally, the bundle facilitates automated code generation, remote environment installation via SSH, and job submission to SLURM clusters (`onescience-runtime`, `onescience-debug`), which are powerful capabilities that could be abused. While these behaviors are plausibly aligned with the stated purpose of managing HPC-based scientific workflows, the direct access to sensitive local configuration files and the automated execution of generated scripts on remote systems warrant a suspicious classification.