Manage 节点小宝 (Node Baby Link / JDxB) remote access service on Linux. Install, start/stop/restart the systemd service, check status, view logs, get pairing cod...

This package appears to implement a manager for a remote-access service, but it asks you (or will run) to download and execute code from third-party hosts. Specifically: the bundled installer fetches a tarball over plain HTTP from cdn.ionewu.com and the skill suggests running a remote install script (curl ... | sudo bash) from iepose.com. Those are dangerous patterns because the downloaded code is unsigned, comes from domains unrelated to each other, and could be replaced or malicious. If you consider installing: 1) Do NOT run the curl|bash one-liner unless you fully trust the domain. 2) Inspect the downloaded tarball and start.sh contents in a sandbox before running as root. 3) Prefer HTTPS and verified releases (checksums / signatures). 4) Consider installing on an isolated VM/container first. 5) If you need pairing info, be aware the script contacts dpis.ionewu.com with parameters extracted from your local service—this transmits identifiers to that external host. If you can't verify the provenance of these domains or the binaries, treat this skill as risky and avoid installing it on production systems.

Type: OpenClaw Skill Name: jdxb Version: 1.0.0 The skill installs and manages '节点小宝' (JDxB), a remote access proxy service, which involves downloading binaries from 'cdn.ionewu.com' and installing a systemd service with root privileges. While the script 'scripts/jdxb.sh' aligns with its stated purpose, the automated deployment of remote access tools and the use of 'curl | bash' patterns (referenced in 'SKILL.md') are high-risk behaviors. No clear evidence of intentional data exfiltration or hidden backdoors was found beyond the inherent risks of the service itself.