PC Master

Control the Windows PC from WSL2. Use when the user asks to open/close applications, manage processes, take screenshots, control windows, manage files on Win...

This skill does what it says: it teaches the agent how to run Windows binaries from WSL2 and how to manipulate files/processes and take screenshots on the Windows host. That capability is powerful and can be privacy-invasive or destructive (reading any file under C:, killing processes, launching executables, saving screenshots). Before installing: 1) only enable it if you trust the skill source/author (source is unknown here); 2) prefer user-invocable use and disable or restrict autonomous invocation for this skill so it cannot run without explicit approval; 3) require human confirmation for any action that reads files, takes screenshots, kills processes, or modifies system files; 4) consider running in a sandbox or test machine if you want to limit risk. Note: the registry scan found no code (instruction-only), but that only means there was nothing for the regex scanner to analyze — it does not guarantee safety.

Type: OpenClaw Skill Name: pc-master Version: 1.0.0 The skill bundle is classified as suspicious due to its broad and powerful capabilities that, while aligned with its stated purpose of controlling Windows from WSL2, present significant security risks if misused or exploited via prompt injection. Key indicators include the ability to execute arbitrary Windows binaries and PowerShell commands (e.g., `cmd.exe /c "start ..."`, direct calls to `.exe` files, PowerShell scripts using `WScript.Shell`) and full read/write access to the Windows file system (`/mnt/c/`). While there is no explicit instruction for malicious actions like data exfiltration or persistence within `SKILL.md`, these capabilities provide a strong foundation for an attacker to perform such actions if they can inject commands or manipulate the agent's behavior.