This skill allows the assistant to launch files and open them with their default applications.

This skill intends to open files via Windows PowerShell (Invoke-Item) but doesn't declare it's Windows-only and provides no safeguards. Before installing: verify you will only use it on a Windows agent; prefer a version that declares OS compatibility; require explicit user confirmation before launching files; restrict launches to trusted directories or file types; and prefer skills with a known source/homepage so you can audit behavior. If you need cross-platform behavior, reject this skill or ask the author to add OS checks and explicit safeguards.

Type: OpenClaw Skill Name: file-launcher Version: 1.0.0 The 'file-launcher' skill grants the agent the ability to execute arbitrary files and programs using the PowerShell 'Invoke-Item' command, as documented in SKILL.md. While this behavior is consistent with the stated purpose of opening media or documents, it provides a high-risk primitive for Remote Code Execution (RCE) if the agent is manipulated into launching malicious scripts or system binaries. No explicit evidence of malicious intent or data exfiltration was found, but the lack of path restrictions makes it a significant security risk.