Enable and configure Agent Synthesizer for OpenClaw to improve autonomy and execution throughput. Use when a user asks to install, set up, troubleshoot, or o...

This skill is coherent in purpose (it points to a specific GitHub repo and tells the agent to follow that repo's README), but it's risky because it gives the agent authority to run whatever commands the remote README asks for without listing them. Before installing or enabling this skill, review the repository README yourself and verify every install/validation command; do not allow the agent to run commands autonomously until you have manually inspected them. Recommended precautions: (1) open the repo and paste here the exact install/test commands the README prescribes so they can be reviewed; (2) run the setup in an isolated environment (container, VM, or disposable machine) rather than your primary system; (3) ensure any required credentials are provided only after you confirm why they are needed; (4) ask the skill author to enumerate required env vars and commands in the SKILL.md so the agent's actions are auditable; (5) if you allow autonomous execution, restrict it to non-privileged contexts and require explicit user confirmation for commands that modify the system or request credentials. Providing the README contents or a list of the README's commands would raise confidence and could change this rating to benign.

Type: OpenClaw Skill Name: agent-synthesizer Version: 1.0.0 The skill bundle is suspicious due to its reliance on an external, dynamic source for execution instructions. The `SKILL.md` explicitly instructs the OpenClaw agent to 'Follow the README exactly as written' and 'run the README’s validation/test commands' from `https://github.com/rylena/agent-synth`. This creates a significant supply chain vulnerability, as the content of the external `README.md` can be altered at any time, potentially leading to the execution of arbitrary malicious commands by the agent without direct control or review within the skill bundle itself. This constitutes an indirect prompt injection risk, where the agent is instructed to prioritize and execute instructions from an untrusted external source.