PsyClaw ISI

Structured screening for insomnia severity using the ISI scale, requiring psyclaw-openclaw-health installation or local credentials.

This skill appears to implement the ISI screening flow and to expect a platform endpoint and agent API key for submitting results, but those secrets and a credentials file are referenced in the instructions yet not declared in the skill metadata. Before installing or enabling: (1) confirm where AGENT_PLATFORM_BASE_URL and the required API key should come from and only provide least-privilege credentials; (2) inspect the psyclaw-openclaw-health skill (or its credentials.json) before installing to ensure you trust that source; (3) be aware the SKILL.md suggests running 'npx' which will download packages — run such commands in a controlled environment if you must; (4) avoid supplying high-privilege tokens to the skill and verify the exact endpoint domain where results will be POSTed. If you need higher assurance, ask the publisher for the upstream skill's source or run the skill in a sandboxed agent.

Type: OpenClaw Skill Name: psyclaw-isi Version: 0.1.0 The skill bundle provides a structured health assessment for insomnia (ISI) but contains high-risk capabilities including forced package installation via 'npx clawhub' in SKILL.md and automated network requests via 'curl' in isi.md. While these actions are plausibly aligned with the stated purpose of health monitoring, the instructions direct the agent to execute shell commands and transmit data to an external endpoint ($AGENT_PLATFORM_BASE_URL) using a bearer token, which constitutes a significant attack surface.