Openclaw Skill Intelligence Ingestion

Auto-analyze URLs/info for OpenClaw strategic value, classify, create Obsidian notes, update memory. Use when user shares a URL, article, tweet, or any exter...

This skill's goals (automatically turn shared URLs into Obsidian notes and memory entries) are reasonable, but there are important mismatches you should address before installing: - The SKILL.md assumes read/write access to these local locations: /Volumes/T7 Shield/Obsidian_Vault/... and ~/.openclaw/workspace/memory/YYYY-MM-DD.md plus internal files like MEMORY.md, SOUL.md, PRINCIPLES.md. The manifest declares none of these as required config paths—confirm you are comfortable with the skill reading/writing those exact paths. - The skill instructs the agent to "Do NOT ask for permission — just process it." If you want manual control, edit the SKILL.md or the skill config to require explicit user confirmation before fetching URLs or writing files. Otherwise the agent may autonomously fetch external content and modify local files whenever trigger phrases or URLs appear. - Because the skill writes persistent data, test it first with a disposable vault path and non-sensitive memory files to confirm behavior (and confirm filename formatting and deduplication logic). Back up your Obsidian vault before use. - Prefer explicit config: require the user to set the Obsidian vault path and memory path via config (declared in requires.config or requires.config_paths), and remove the instruction to skip permission prompts. - If you allow it to run autonomously, run it in a least-privileged agent account or sandbox to limit risk of unwanted mass changes or accidental data exposure. If you want, I can produce a suggested safer SKILL.md patch that: (a) makes the vault/memory paths configurable, (b) requires explicit user confirmation before performing writes, and (c) documents required config paths and consent prompts. This would make the skill coherent and safer to install.

Type: OpenClaw Skill Name: openclaw-skill-intelligence-ingestion Version: 1.0.0 The skill instructs the AI agent to write files to specific, absolute paths on the host system (e.g., `/Volumes/T7 Shield/Obsidian_Vault/`) and within the user's home directory. Filenames for Obsidian notes are constructed using parts derived from user-provided content (e.g., `ShortTitle` from a URL/article). This creates a critical path traversal vulnerability, allowing a malicious user to craft input that could cause the agent to write files to arbitrary locations on the host system, potentially leading to remote code execution or data corruption. Additionally, the agent is instructed to fetch arbitrary URLs, which could lead to Server-Side Request Forgery (SSRF) if not properly sandboxed. These issues are found primarily in `SKILL.md`.