Skill Dependency Fixer

Scan installed OpenClaw skills for missing npm, pip, brew, or system dependencies and auto-install fixable ones.

This skill's goal is reasonable, but treat it as suspicious until you verify the implementation: 1) Confirm the GitHub repository and author (SKILL.md references a GitHub repo and a Homebrew tap 'christianteohx' — inspect them manually). 2) Prefer running the tool in --dry-run or review any generated Node.js project before executing or installing. 3) Do not run curl|sh or install binaries from unverified releases; prefer official package sources. 4) Be aware that --fix will invoke brew/npm/pip globally and may require privileges or change system state; run under a non-privileged account or in a disposable environment (VM/container) first. 5) Ask the maintainer to fix the metadata mismatch (node declared in SKILL.md but not in registry) and to make explicit whether the agent should auto-run installers or only produce an audit. If you want this skill to run automatically, require explicit confirmation before any system installs.

Type: OpenClaw Skill Name: skill-dep-fixer Version: 2.0.9 The skill-dep-fixer bundle instructs the agent to generate a CLI tool that automatically installs system and language-level dependencies (brew, npm, pip) by parsing local markdown files. It also directs the agent to perform system-level updates (e.g., 'brew upgrade', 'clawhub update') and suggests installing a binary from a personal GitHub repository (christianteohx/skill-dep-fixer) via curl. While framed as a maintenance utility, the automated execution of package managers and the instruction for the agent to modify the host environment represent high-risk behaviors that could be exploited if malicious skill metadata is present.