Skill Gatekeeper

技能門禁系統 - 自動審核、沙盒測試、安全放行

This skill implements the advertised audit/sandbox flow, but review the code before installing. Specific concerns: (1) gatekeeper.ts executes an external installer via child_process.execSync using a hard-coded Windows path (C:/Users/ReaMasTer/...), which is unusual and may run arbitrary code on installation — ask the author why this path is used or remove/replace it with a platform-appropriate installer call. (2) The script uses cpSync and rmSync to copy and delete skill directories (quarantine), so a bug or malicious change could remove files outside the intended directory; verify path handling and consider running only in an isolated/test environment first. (3) The tool stores a VirusTotal API key in ~/.opencode/config/gatekeeper.json — ensure you are comfortable storing that key locally. Recommended actions: inspect the full source for the execSync usage and any other external calls, run the tool inside a disposable VM/container before using it on a production machine, back up ~/.opencode, and prefer a version that uses a documented, platform-agnostic installer mechanism rather than a hard-coded path. If you cannot verify the code or get clarification, treat this skill as untrusted.

Type: OpenClaw Skill Name: skill-gatekeeper Version: 2.0.0 The skill is designed as a security auditing tool but contains a critical shell injection vulnerability and non-portable code. In gatekeeper.ts, the 'installWithAudit' function passes the user-provided 'slug' argument directly into a shell command via execSync without sanitization. Furthermore, the script uses a hardcoded absolute path to a specific local user directory (C:/Users/ReaMasTer/...) for the 'clawhub' binary, which is a significant implementation flaw. While the stated intent is defensive (static analysis and VirusTotal integration), these vulnerabilities allow for potential command execution on the host system.