Warren - On-Chain Website Deploy

Deploy websites and files permanently on MegaETH blockchain. AI agents stress test the network by deploying HTML on-chain using SSTORE2 bytecode storage. Agents pay their own gas.

This skill appears to implement what it says (deploying immutable content to the MegaETH testnet), but there are important cautions: 1) It requires a wallet private key to sign and pay transactions, yet the skill metadata does not declare this — treat that omission as a red flag. 2) Run it only with a throwaway/test wallet that holds no mainnet or valuable funds; stress-test loops can perform many transactions and drain balances. 3) Inspect deploy.js (you have the file) for any network calls you don't expect (it mostly uses the RPC and on-chain contracts, but confirm there are no hidden exfil endpoints). 4) The SKILL.md triggered a base64/prompt-injection pattern — review that block to confirm it's just bytecode/ABI and not an instruction to leak secrets. 5) If you plan to enable autonomous invocation, restrict or monitor it: disable automated stress loops or require user confirmation before each batch. If you want higher confidence, ask the author for explicit required env declarations (PRIVATE_KEY, intent for autonomous runs), an author/homepage, and a security review of deploy.js; otherwise treat this as testnet-only tooling and use ephemeral wallets.

Type: OpenClaw Skill Name: warren-deploy Version: 1.0.2 The skill is classified as suspicious due to its requirement for and direct handling of a user-provided private key for blockchain transactions in `deploy.js`, and an explicit outbound network call via `curl` to `https://megawarren.xyz/api/stress-test/leaderboard` in `SKILL.md`. While these actions are plausibly aligned with the stated purpose of deploying to a testnet blockchain and stress testing, they represent high-risk capabilities (credential handling and external network access) that could be leveraged maliciously if the intent were different. There is no clear evidence of intentional harmful behavior like credential theft or unauthorized data exfiltration beyond the stated purpose.