Radon AI

Use Radon IDE's AI tools for React Native development - query library docs, view logs and network traffic, take screenshots, inspect component trees, and int...

This skill claims powerful debugging access (logs, network bodies, screenshots, app control) but the instructions never say how the agent will connect to Radon’s MCP server, what endpoint or auth to use, or what safeguards exist. Before installing or letting the agent use it: (1) Ask the author for the connector details — host/port, API schema, and auth mechanism — and only allow local-only endpoints (e.g., localhost) with explicit consent. (2) Confirm the Radon IDE extension source and license and that it restricts access to test/dev apps (not production data). (3) Request explicit data-handling rules (filtering of secrets, opt-in consent for network bodies/screenshots). (4) Test the skill in an isolated/sandbox environment with no sensitive backends or real credentials. If the author cannot supply concrete connection/auth information and data-protection controls, treat the skill as non-functional or potentially risky and avoid giving it access to sensitive projects.

Type: OpenClaw Skill Name: radon-ai Version: 1.0.0 The skill provides powerful debugging tools, notably `view_network_logs` and `view_network_request_details` in `SKILL.md`, which can expose sensitive information like network request headers and bodies. While these capabilities are presented for legitimate debugging purposes (e.g., inspecting API calls), they represent a significant risk. If the AI agent were compromised via prompt injection, these tools could be misused to exfiltrate credentials, tokens, or other confidential data from the user's application network traffic. This constitutes a high-risk capability that could lead to data exfiltration, classifying it as suspicious due to the potential for abuse, despite the stated benign intent.