Skills Backup Claw Shell

Executes shell commands inside a dedicated tmux session named claw, capturing and returning the command output safely.

This skill runs arbitrary shell commands inside a tmux session named 'claw'. Before installing or using it: (1) confirm the host has tmux and ask the author to list tmux as a required binary; (2) understand that the skill executes whatever you pass to it — do not use it on systems with sensitive data or where untrusted users can provide commands; (3) the dangerous-command check is simple and can be bypassed, and the code returns an error instead of prompting as the README suggests — treat it as not enforcing confirmation by itself; (4) if you need safer behavior, request the author add robust parsing, explicit interactive confirmation, and/or a command allowlist and declare required binaries. If you lack confidence in those fixes, consider not installing or running the skill on production/privileged machines.

Type: OpenClaw Skill Name: skills-backup-claw-shell Version: 1.0.0 This skill is classified as suspicious due to its core functionality allowing arbitrary shell command execution via `execSync` in `handler.js`. A critical shell injection vulnerability exists in the `sendCommand` function, as `tmux send-keys` will transmit shell metacharacters (e.g., `;`, `|`, `$(...)`) from the `command` input directly to the shell within the tmux pane, allowing an attacker to execute arbitrary commands beyond the intended single command. While `SKILL.md` and `handler.js` include keyword-based safety checks, these are easily bypassable and do not mitigate the underlying vulnerability, making the skill a high-risk primitive.