mufi-admin

Manage MUFI events by creating and connecting festivals, campaigns, frame templates, and frames with specified details and images via admin.muinfilm.com.

This skill is an instruction-only guide for automating MUFI admin UI tasks; the content itself matches that purpose. However it assumes an authenticated browser session (mentions a profile named 'openclaw') but does not explain how to authenticate or how credentials are handled. Before installing or allowing autonomous use: 1) Confirm how you will provide authentication (do not upload or share full browser profiles unless you trust the skill/source). 2) Prefer manual review or sandboxed testing of the DOM-eval snippets — they execute clicks and could save unintended changes. 3) If you plan to allow autonomous invocation, restrict or monitor runs so the skill can't perform wide-ranging admin changes without human approval. 4) Ask the publisher for clarification about authentication and whether the 'openclaw' profile is required or a local convenience tip. If you cannot verify those details, treat this skill cautiously or test it in a non-production environment first.

Type: OpenClaw Skill Name: mufi-admin Version: 1.0.0 The `SKILL.md` file explicitly instructs the OpenClaw agent to use `evaluate` for direct DOM manipulation (e.g., `document.querySelectorAll(...).click()`, `document.querySelector(...).click()`). While the provided JavaScript snippets are benign and related to the stated purpose of automating admin tasks on `https://admin.muinfilm.com`, this instruction highlights a powerful capability that allows arbitrary JavaScript execution within the browser context. This presents a significant prompt injection vulnerability against the agent, as a malicious prompt or a modified `SKILL.md` could leverage this to execute harmful code.