Skill Forge

AI 技能自动发现、评估、集成、验证、宣传闭环系统 — 跨生态技能市场引擎

This skill is 'suspicious' because its runtime steps do things (clone repos, run scans, publish to X/ClawHub) that are not reflected in the metadata. Before installing or invoking it: 1) Do not run its pipeline on your primary machine — use an isolated sandbox or VM. 2) Ask the author for a full manifest of required binaries and environment variables (pnpm/node/git/YARA, TWITTER_BEARER_TOKEN, ClawHub credentials, etc.) and why each is needed. 3) Inspect the actual implementation code (the GitHub repo link is provided) — review scripts that the pipeline executes, any auto-publish logic, and what data is uploaded to external services. 4) Limit the credentials you provide to least privilege (e.g., scoped tokens) and prefer time-limited/test accounts. 5) If you must run it, do so with network controls and file-system snapshots so you can undo changes and monitor outbound activity. 6) If the repo or code is not available for review or the author cannot justify the undeclared credentials/tools, avoid granting sensitive tokens or running the pipeline.

Type: OpenClaw Skill Name: skill-forge Version: 0.3.0 The skill is classified as suspicious due to its broad and high-risk capabilities, which include requiring access to sensitive credentials (`TWITTER_BEARER_TOKEN` in `SKILL.md`), performing extensive network interactions with numerous external services (GitHub, X/Twitter, HuggingFace, etc.), cloning and potentially processing untrusted code from external repositories, probing local system runtimes, and interacting with social media platforms (posting tweets). While these actions are described as part of the skill's stated purpose (AI skill discovery and promotion), they introduce significant security vulnerabilities and a high potential for abuse through prompt injection or supply chain attacks, even without explicit malicious instructions in the provided files.