Pilot S3 Bridge

Access cloud storage (S3, GCS, Azure Blob) through a Pilot bridge agent. Use this skill when: 1. You need to transfer files to/from cloud storage via Pilot a...

This skill looks like it does what it says (bridge cloud storage via a Pilot agent) but the SKILL.md and the registry metadata don't match. Before installing or running it: 1) don't export long-lived AWS keys into a shell without careful thought — prefer IAM roles, short-lived tokens, or scoped service accounts and grant the bridge only the minimum permissions (specific buckets/prefixes and only required actions). 2) Ensure required binaries (aws CLI, jq, and any cloud CLIs you need) are installed and come from trusted sources; update the skill metadata to list them. 3) Avoid running the daemon with --public unless you understand the network exposure; prefer private network/VPC or firewall rules and rate limits. 4) Review and test the loop in an isolated environment (no production credentials) to verify it doesn't leak local data or accept dangerous commands from untrusted senders; the skill currently forwards raw aws/ls output back to send-message without escaping. 5) Ask the publisher for an updated SKILL.md/metadata that declares required env vars and CLIs, documents recommended credential handling, and clarifies security considerations. If you cannot obtain those clarifications, treat the skill as risky and run only in a well-restricted, monitored environment.

Type: OpenClaw Skill Name: pilot-s3-bridge Version: 1.0.0 The skill provides a bridge for cloud storage via the 'pilotctl' utility, but the example implementation in SKILL.md contains critical shell injection vulnerabilities. Specifically, the bash workflow uses unsanitized output from jq (e.g., $BUCKET and $KEY) directly within 'aws s3' command strings, which could allow an attacker to execute arbitrary commands. While these appear to be unintentional security flaws rather than intentional malware, the combination of insecure command execution and the requirement for AWS credentials makes the bundle high-risk.