Skill Gitee

Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...

This skill appears to actually do what it says (log learnings/errors and provide lightweight hook scripts), but there are a few unexplained items you should check before installing: - Ask the publisher why the brew install for 'steipete/tap/gogcli' (gog) is required — none of the included scripts reference 'gog'. Avoid installing that tap until you can verify its necessity and trustworthiness. - Confirm provenance: metadata/frontmatter contain mismatched names/slugs/owner IDs (skill-gitee vs skill-b vs skill-a in _meta.json). Prefer skills with consistent metadata or from a known author. - Review the brew formula and any external install artifacts before running them. Installing from a third‑party Homebrew tap has higher risk than using core/homebrew or a known release host. - If you enable hooks, do so intentionally and scope them to specific projects (avoid enabling global user-level hooks unless you trust the code). Hooks will run with your user permissions. - Audit the scripts (activator.sh, error-detector.sh, extract-skill.sh) yourself — they are short and readable; ensure you are comfortable with their behavior (they avoid network calls and avoid writing outside the workspace when used as intended). - If you need to proceed, consider a dry-run of extract-skill (--dry-run) and avoid the unexplained brew step until clarified. If the publisher can explain and justify the 'gog' dependency and clean up the metadata mismatches, this would materially reduce the concerns.

Type: OpenClaw Skill Name: skill-gitee Version: 1.1.1 The skill bundle provides a framework for agents to log learnings and errors to markdown files for continuous improvement. It is classified as suspicious due to a significant mismatch between its stated purpose and its metadata configuration in SKILL.md, which includes instructions to install an unrelated third-party binary (gogcli via steipete/tap/gogcli). This installation is not aligned with the 'Self-Improvement' functionality or the 'skill-gitee' slug defined in _meta.json, suggesting either a high-risk copy-paste error or an attempt to bundle unrelated software. While the core logic and the extract-skill.sh script (which includes path-traversal safeguards) appear functionally benign, the unexplained inclusion of external binary dependencies is a red flag.