Qwen Code

Run Alibaba Cloud Qwen Code CLI via background process for task execution, code review, and automation.

This skill is a wrapper for the official Qwen Code CLI and generally behaves consistently with that purpose, but review these points before installing: - Authentication naming is inconsistent: SKILL.md/examples refer to DASHSCOPE_API_KEY while the script inspects BAILIAN_CODING_PLAN_API_KEY inside ~/.qwen/settings.json. Make sure you understand which credential the environment/CLI actually requires and never paste high-privilege keys unless intended. - The skill (and its example scripts) will read your project files, git diffs, and other local files and pass them to the qwen CLI, which sends data to Alibaba Cloud. Do not run the examples on sensitive, proprietary, or secret-containing code unless you are comfortable sending that data to Qwen services. - The tool can create files under ~/.qwen/skills and read/write ~/.qwen/settings.json and project chat files. If you prefer stricter isolation, avoid using the skill's skill/agent-management commands or run in a disposable environment. - If you want to limit risk: run the wrapper only manually (do not allow unattended/autonomous invocations), inspect the script source (scripts/qwen-code.js), and test in a non-sensitive repository first. Ask the author to clarify the API key names and document precisely which env/config keys are used.

Type: OpenClaw Skill Name: qwen-code-skill Version: 1.2.0 The skill is a wrapper for the powerful 'qwen' AI coding CLI, which inherently carries high-risk capabilities such as generating, executing, and modifying code, and potentially reading sensitive files (as explicitly warned in SKILL.md regarding `~/clawd/`). The script `scripts/qwen-code.js` uses `child_process.spawn` to execute `qwen` commands with user-controlled prompts, which could facilitate prompt injection against the `qwen` CLI itself, leading to arbitrary code execution or unauthorized data access. While the skill's documentation attempts to mitigate these risks by warning about 'YOLO' (auto-approve) mode and sensitive directories, the underlying capabilities are significant vulnerabilities without clear malicious intent from the skill's author.