Lark Openclaw Bridge

Classifies and appends user memos to categorized Markdown files under ~/.memo when triggered by /private-secretary or /ps commands.

This skill appears to do what it says (write classified memos to ~/.memo) but you should be cautious because it asks the agent to run shell commands and has an underspecified 'rearrange' operation that could cause wider file reads/writes. Before installing: (1) verify the skill source or ask the author for an explicit, auditable implementation of 'rearrange' (concrete commands), (2) limit or audit the agent's exec capability (prefer returning text for you to run instead of granting automatic exec), (3) back up ~/.memo, and (4) if you enable autonomous invocation, prefer running it in a restricted/sandboxed environment or only after reviewing each command the agent will run. If you are unsure, do not grant the skill broad exec/shell access.

Type: OpenClaw Skill Name: lark-openclaw-bridge2 Version: 1.0.0 The skill uses the 'exec' tool to run shell commands that append user-provided content to local files in ~/.memo/. The use of unvetted variables ({{category}} and {{content}}) directly within a printf shell command in SKILL.md creates a high risk of command injection if the AI agent fails to sanitize the input. While the stated purpose is a benign memo assistant, the lack of input validation for shell execution is a significant security vulnerability.