Skill Runner

Enables secure execution of specified OpenClaw skills via cron jobs by forwarding agentTurn messages and passing the necessary context.

This skill can run other local skills by importing their index.js and passing them the runner's full context. Before installing, consider: 1) The code hard-codes /home/bosunjung/... — confirm that path is correct for your environment or request that the author make the base path configurable. 2) The message payload ("run <skill-name>") is not sanitized or allowlisted — an attacker who can send cron payloads or agentTurn messages could request 'run ../../some/path' and cause arbitrary local file execution. Require an allowlist of permitted skill names or validate against a strict pattern (e.g., /^[a-z0-9_-]+$/). 3) The runner forwards its full context (tools, sessions) to the invoked skill — limit the context or use capability-scoped proxies so untrusted skills can't access more than they need. 4) Run this skill as a least-privileged user and ensure the runtime cannot read sensitive files from the filesystem; avoid running as root. 5) Ask the author to remove the hard-coded username path, add input sanitization, implement an allowlist, and document exactly which capabilities are passed to invoked skills. If you cannot confirm these changes, consider this skill risky and avoid installing it on production or multi-tenant systems.

Type: OpenClaw Skill Name: skill-runner Version: 1.0.0 The skill implements dynamic code execution by importing and running arbitrary JavaScript files based on user-provided input in index.js. It is highly vulnerable to path traversal because the 'skillToRun' parameter is not sanitized before being used to construct a file path, allowing potential execution of any 'index.js' file on the filesystem. While the stated purpose is to facilitate cron jobs, the combination of dynamic imports, lack of input validation, and a hardcoded absolute path (/home/bosunjung/) represents a significant security risk.