GitHub README Generator

Generate beautiful, professional GitHub README files for your projects. Supports multiple templates, languages, and customization options.

This skill appears to do what it says: it runs a local shell script that writes README.md from templates and may read your local .git user.name. Before installing/running: (1) review the included github-readme-generator.sh (you already have it) and ensure you trust the author, (2) run it in a safe directory because it will overwrite README.md, (3) be aware the script uses simple sed substitutions that may behave oddly if your project name or description contain unusual characters (slashes, braces), and (4) no credentials or network calls are requested by the skill, so there is low risk of secret exfiltration. If you want extra safety, run the script in a disposable repo or review/modify it to sanitize inputs before use.

Type: OpenClaw Skill Name: github-readme-generator Version: 1.0.0 The `github-readme-generator.sh` script is vulnerable to `sed` injection. User-provided inputs for `NAME` and `DESCRIPTION` are directly used in `sed` replacement commands without proper escaping of special characters (e.g., `/`, `&`). This allows an attacker to craft inputs that can corrupt the generated `README.md` file or inject arbitrary markdown/text, which could potentially be used for prompt injection if the `README.md` is later processed by an AI agent. This is a significant input sanitization vulnerability.