Supernal Interface CLI

CLI tool for generating tests, scanning contracts, managing story-based tests, and setting up MCP integration in web projects.

This SKILL.md describes a legitimate-seeming CLI, but before installing or running anything: (1) locate and inspect the npm package (@supernal/interface) source (GitHub/homepage, package.json, published tarball) — do not install from npm without reviewing it; (2) run any initial tests inside an isolated environment (container or disposable VM) rather than your main workstation or production repo; (3) back up your repository and avoid using auto-commit/--force flags until you’ve reviewed the changes the tool will make; (4) be cautious with commands that 'configure IDE', 'create server', or 'install agents' and verify what credentials or network connections they require; (5) if you allow an autonomous agent to run these commands, restrict its permissions and monitor its actions. If you can, ask the publisher for a homepage or source repository link and audit the package contents before trusting it.

Type: OpenClaw Skill Name: si Version: 1.0.0 The `SKILL.md` describes a CLI tool with extensive, high-privilege capabilities that, while plausible for a development tool, introduce significant risk. Key indicators include `npm install -g @supernal/interface` for global package installation, `si setup-mcp` which configures IDEs and creates servers, and `si setup-claude` which installs other skills and agents. These commands grant broad system access, file system modification, and the ability to introduce further executable components, elevating the risk profile beyond benign, despite no explicit malicious intent or prompt injection attempts found within the `SKILL.md` itself.