Skill Proposal Gen

skill proposal gen

This skill's functionality (proposal templates, create/list/export) is plausible and there is no evidence of network exfiltration or secret access — but there are several inconsistencies and surprising behaviors you should check before installing: (1) The SKILL.md example imports execute, but __init__.py only exposes ProposalGen — try importing the package locally to confirm the API. (2) Version metadata is inconsistent across files, which suggests packaging errors. (3) The code creates and writes files into a 'proposals' directory located next to the module; determine where that will be on your system (it may be inside site-packages) and whether you want the skill to write there. (4) The implementation has minor code issues (missing typing imports) that could cause runtime errors. Recommended actions: inspect or run the package in a sandbox/isolated environment, review/modify the code to change the storage path to a user-writable data directory if needed, and only grant it broader access if you confirm the code matches the documented behavior. If you need a clean API (execute function), either patch __init__.py to expose it or prefer a different skill that documents its public interface consistently.

Type: OpenClaw Skill Name: skill-proposal-gen Version: 1.0.1 The skill bundle contains a path traversal vulnerability in 'proposal_gen.py'. The 'load' and 'save' functions use unsanitized project names to construct file paths via 'os.path.join', which could allow an attacker to read or write files outside the intended 'proposals' directory. While the code appears to be a legitimate proposal generation tool, this security flaw constitutes a high-risk behavior according to the analysis criteria.