Automation Master

一站式办公自动化套件，集成文件处理、数据提取、智能数据集匹配等核心功能。

This skill largely does what its description says (Windows-only office automation), but review and take precautions before installing: - Inspect and remove or parameterize the hard-coded network printer IP (\\10.92.30.89). As-written, print jobs may be routed to that host without explicit user consent, which can leak sensitive documents. - Be aware the code manipulates global system state: it kills LibreOffice processes, enumerates and deletes printer jobs, and uses COM automation to open/print Office files. Run it only on a dedicated Windows test machine or sandbox first. - If you need printing features, require an explicit printer parameter or allow configuration via trusted settings (not a baked-in IP). Confirm where print jobs are sent during testing. - Audit the omitted/truncated files for any other hard-coded endpoints, network calls, or data-exfiltration logic before use. - Consider limiting the skill’s access to sensitive directories and avoid running it with elevated privileges. If you cannot audit the full codebase, avoid installing it in production or giving it access to sensitive documents. If you want, I can search the remaining truncated files for other hard-coded endpoints, network communication, or suspicious patterns (e.g., HTTP requests, sockets, external upload logic).

Type: OpenClaw Skill Name: mk1350-automation-master Version: 1.0.2 The skill bundle is classified as suspicious due to the inclusion of an atypical 'billing' and 'subscription' logic in execute.py and SKILL.md, which references pay-per-use pricing and 'automatic refunds' for an AI-driven service. The code employs high-risk Windows APIs and system commands, such as win32com for Excel manipulation, os.system for killing processes (taskkill), and win32api.ShellExecute for printing. Furthermore, services/file_print_service.py contains a hardcoded internal IP address (10.92.30.89), indicating the code may be specifically targeted or poorly sanitized. While no direct evidence of data exfiltration was identified, the combination of commercial prompt-injection-like instructions and high-privilege system access is concerning.