SnapGen

Use this skill when the user asks to open, run, or automate a specific desktop application. It manages the full lifecycle of automation scripts within dedica...

This skill will read and execute Python code found in your workspace using your system Python. Only install or run it if all app automation scripts in skills/snapgen/apps/ are trusted. Before use: (1) review any {PROCESS_NAME}.py files for unwanted network, file, or credential access; (2) consider running automations inside an isolated Windows VM or dedicated user account; (3) avoid exposing secrets or shared credentials to the workspace; (4) prefer installing clicknium in a controlled virtualenv rather than system-wide; (5) be cautious when following the recorder login prompt — it will ask you to perform interactive logins that could expose credentials or MFA flows. If you need higher assurance, request the actual app scripts for code review or run them in a sandbox first.

Type: OpenClaw Skill Name: snapgen Version: 1.0.1 The skill provides a framework for desktop application automation using the `clicknium` library. It exhibits high-risk behavior by dynamically generating and executing temporary Python scripts (`run_temp.py`) and invoking an external binary (`Clicknium.Recorder.exe`) to record and generate code. While these capabilities are aligned with the stated purpose of automating desktop tasks, the pattern of on-the-fly script creation and execution based on user-derived parameters creates a significant RCE (Remote Code Execution) attack surface, which is classified as suspicious under the vulnerability-vs-malice criteria.