x-cmd network skill

This skill provides comprehensive network administration and diagnostic tools through x-cmd CLI, including network scanning with Nmap, ARP table management,...

This skill appears to be what it says (network diagnostics) but there are important gaps you should clear before installing or allowing it to run: 1) Confirm provenance — the registry metadata has no homepage and the source is 'unknown' even though SKILL.md lists a GitHub repo; verify that repository and its releases are trustworthy. 2) Ensure the required binaries exist and are from safe sources: x-cmd (the skill's CLI), nmap, and a curl-compatible tool are needed for many features — the skill should declare these in metadata. 3) Be cautious with privileges: some commands require administrator/root and raw socket access; run scans in a controlled environment and check your network policy/legal rules before performing scanning. 4) If you enable autonomous invocation for the agent, consider restricting or monitoring it: network scanning can be disruptive and has security/policy implications. If the publisher can clarify the missing required-binaries metadata and provide verifiable source artifacts, that would raise confidence; until then treat the package as suspicious and proceed only with verification and appropriate safeguards.

Type: OpenClaw Skill Name: x-network Version: 1.0.1 The skill provides high-risk network administration capabilities including port scanning (nmap), DNS configuration management, and ARP table analysis via the x-cmd CLI. While these tools are consistent with the stated purpose of network diagnostics in SKILL.md, they grant the agent significant network-level access and the ability to modify system configurations (e.g., DNS settings), which are considered high-risk behaviors. No evidence of intentional malicious behavior, data exfiltration, or prompt injection was found.