Path-Dispatch

Discrete Hamiltonian task dispatch for multi-hop workflows. Maps task dependencies as a graph, precomputes reachability matrices, and solves constrained path...

This skill appears to do what it claims, but exercise caution before running it. Specific recommendations: - Review the included scripts/dispatch.py yourself (or in a sandbox) before executing. The code uses pickle to save/load a .cache file (filepath.cache). Unpickling attacker-controlled files can run arbitrary code; only use caches you created/trust. - If you will run this on untrusted triples files or in shared directories, set PATH_DISPATCH_NO_CACHE=1 to disable caching (SKILL.md documents this) or ensure cache files are access-controlled and created only by you. - The package requires numpy and scipy.sparse (requirements.txt) but no install mechanism is provided; install these dependencies in a controlled environment (virtualenv/container) prior to use. - Prefer running the script in an isolated environment (container/VM) until you validate its behavior and outputs. - If you plan to let an agent invoke this skill autonomously, consider restricting which input file paths the agent can pass to it, to avoid the agent pointing the script at unexpected files or attacker-controlled cache files. If you want, I can: (a) point out the exact lines to change to replace pickle with a safe serialization format, (b) produce a minimal install spec (pip) to include dependencies, or (c) produce a sandboxed wrapper that validates cache contents before unpickling.

Type: OpenClaw Skill Name: path-dispatch Version: 1.0.4 The skill implements a graph-based task dispatcher using a custom triple format. The primary security concern is the use of 'pickle.load()' in 'scripts/dispatch.py' to load cached graph data from a file. This creates a Remote Code Execution (RCE) vulnerability if an attacker can place a malicious '.cache' file in the working directory. While 'SKILL.md' includes a security note warning about this behavior and provides a method to disable it (PATH_DISPATCH_NO_CACHE=1), the inclusion of inherently unsafe deserialization logic for a caching feature is a high-risk vulnerability.