Validate

Score startup idea through S.E.E.D. niche check + STREAM 6-layer analysis + Devil's Advocate inversion, auto-pick stack, and generate PRD with acceptance cri...

This skill appears coherent and reasonably low-risk, but review these practical considerations before installing or running: - It will read local markdown/docs (manifest, research.md, etc.) and may write generated PRDs to the project. Run it in a workspace that doesn't contain sensitive or private documents you don't want scanned or modified. - The skill performs web searches and (if available) will use MCP KB/project/web search tools; it does not send data to unknown external endpoints beyond normal web search. Still review any output before sharing externally. - Because Read/Grep/Bash/Write/Edit are allowed, the agent could modify files — back up important repo content or run in an isolated copy if you want to prevent accidental changes. - No credentials or installs are requested, so there's no secret-exfiltration signal in the manifest. If you later add MCP tools that provide access to additional data sources, consider whether those tools should be restricted. If you want extra caution: try the skill on a small, non-sensitive idea first and inspect generated files and logs to confirm behavior matches expectations.

Type: OpenClaw Skill Name: solo-validate Version: 2.1.1 The `solo-validate` skill, while designed for a legitimate purpose, is classified as suspicious due to the presence of a significant shell injection vulnerability. Specifically, in `SKILL.md` (Step 2), the agent is instructed to 'Grep for idea keywords' using user-provided `$ARGUMENTS`. If the underlying agent's `Grep` or `Bash` execution does not properly sanitize this user input, it could allow an attacker to execute arbitrary shell commands. The skill also allows `Write` operations to `docs/prd.md`, which, while intended for legitimate document generation, could be a vector for content injection if not handled robustly. There is no evidence of intentional malicious behavior such as data exfiltration, persistence, or unauthorized remote control.