🔍 AI 事实核查 - 自动验证大模型输出准确性，检测 hallucination 幻觉编造内容，联网搜索交叉验证给出可信度评分和修正。解决大模型一本正经胡说八道的痛点。

What to consider before installing: - Don't install blindly. The skill's purpose is coherent, but the code contains a command-injection vulnerability: scripts/fact-check.js builds a shell command by interpolating user text into execSync(openclaw tool web_search --query "..."). An attacker-controlled input could inject shell metacharacters (e.g., `;`, `&&`, `$(...)`, backticks) and execute arbitrary commands on your host when the script runs. - If you must use it: run it only in a sandboxed or isolated environment (container/VM) until you fix the code. - Fixes to request or apply before running: - Replace execSync with a safer invocation that passes arguments as an argv array (avoid the shell) or use the OpenClaw SDK/API instead of shelling out. For Node, use child_process.spawn or execFile with an array of arguments to avoid shell interpolation. - Properly validate/escape user input. At minimum, reject inputs containing suspicious shell metacharacters or sanitize them using a robust escaping library. - Add robust error handling for the web_search output before JSON.parse to avoid crashes or injection via malformed output. - Remove any unicode control characters from SKILL.md and verify there are no hidden/invisible characters intended to manipulate downstream parsers. - Verify the openclaw CLI behavior: confirm that openclaw tool web_search returns well-formed JSON and that invoking it from scripts is allowed and safe in your environment. - If you don't want to run code from this unknown source, consider implementing the same logic yourself or using a vetted fact-checking skill/utility. Overall: the skill is functionally coherent but contains security issues (shell injection risk + suspicious control characters). Treat it as suspicious until the above issues are resolved.

Type: OpenClaw Skill Name: ai-fact-checker Version: 1.1.0 The skill contains a command injection vulnerability in `scripts/fact-check.js` due to the use of `execSync` to invoke the `web_search` tool. While the script attempts to escape double quotes, it fails to sanitize other shell metacharacters (e.g., backticks, semicolons, or subshells), which could allow a crafted 'fact' to execute arbitrary commands on the host. This is classified as suspicious rather than malicious because the behavior appears to be a poorly implemented interface to the OpenClaw CLI rather than an intentional backdoor or exploit.