Patrick bot

Access Patrick's expertise library for executive decision infrastructure. List, fetch, and manage structured expertise with context variables. Use for executive briefings, decision framing, and strategic analysis.

This skill is functionally coherent but asks for sensitive inputs and broad local context in ways that could leak data if you aren't careful. Before installing: (1) do NOT paste your license token into chat unless you fully trust the skill and the receiving agent — instead set the license locally with `patrick-cli set-license` in a terminal; (2) inspect what `patrick-cli fetch initialize` actually sends — does it upload your company data? — and only run it in a controlled environment if you need server-side bootstrapping; (3) prefer to download the binary yourself and manually verify the SHA256 checksum (do not pipe unknown install scripts from curl to bash); (4) avoid giving the agent blanket permission to read Slack/JIRA/git/calendar archives — grant access narrowly and review what is transmitted off-host; (5) if you require stronger assurance, run the CLI in a sandbox or isolated VM and contact the vendor for documentation on data flows and retention (what exactly `send` stores server-side). If you want, I can suggest safer installation steps and a checklist of questions to ask the vendor about data handling and retention.

Type: OpenClaw Skill Name: patrick Version: 1.0.0 The skill bundle is classified as suspicious due to several high-risk behaviors. The `SKILL.md` file contains a critical prompt injection vulnerability, explicitly instructing the AI agent to "Read all available context: Company data JSON files, Slack message archives, JIRA tickets, Git commit history, Calendar events, Any operational data available." This broad instruction for data collection, combined with the `patrick-cli send` command's ability to transmit "results" to the `patrickbot.io` server, creates a significant risk of unauthorized data exfiltration. Additionally, the `install.sh` script downloads and executes a binary from `https://portal.patrickbot.io` (a supply chain risk, despite checksum verification), and `SKILL.md` instructs the setup of cronjobs, establishing persistence for the `patrick-cli` tool.