Operator Skill

Orchestrates collaborative agent sessions with secure, fault-tolerant CRDT persistence and instant crash-proof state recovery.

Do not install this skill until the author clarifies and fixes several inconsistencies. Specifically ask for: (1) a corrected package.json that matches imports (either change import to the declared package or update dependencies to include 'loro-crdt'), (2) explanation of package-lock contents (why unrelated dependencies are present), (3) included build artifact (dist/index.js) or a clear build/install instruction, and (4) explicit declaration of the dependency on agent-comm-skill (or remove the relative import and verify signatures locally with a known Ed25519 library). Also review the source of the agent-comm-skill if signature verification remains delegated — it will have the ability to inspect/validate payloads and could expand the skill's effective privilege. If you proceed, run the skill in a sandboxed environment, limit file write permissions to an isolated folder, and avoid granting broad host access until the above issues are resolved.

Type: OpenClaw Skill Name: operator-skill Version: 0.1.0 The skill bundle exhibits several high-risk indicators, most notably a dependency mismatch and a critical Path Traversal vulnerability. The 'index.ts' file imports 'loro-crdt', but 'package.json' and 'package-lock.json' specify 'loro' (v1.0.6), a package that atypically depends on 'express' and 'body-parser', suggesting a potential typosquatting or supply chain attack. Furthermore, the 'team.sync' and 'team.load' actions in 'index.ts' use the 'sessionId' parameter directly in 'path.join' without sanitization, allowing an attacker to read or append data to arbitrary files on the system (e.g., via '../../' sequences). While these behaviors are highly risky, they are classified as suspicious rather than malicious because the provided code logic follows the stated purpose of CRDT persistence and the harmful intent of the external 'loro' dependency cannot be confirmed without its source code.