Steward Ops — World-Class AI Chief of Staff System

World-class autonomous admin, personal ops, chief-of-staff skill system. Use ANY time user asks to triage email, manage inbox, track deadlines, monitor renew...

This skill is 'suspicious' because its instructions expect many local CLIs, a specific user's home-path workspace, and access to platform/account data, yet the registry declares no required binaries or credentials. Before installing or enabling it, consider: 1) Ask the author for clarification: what binaries and credentials are required, and why are there user-specific paths? 2) Do not run it with autopilot/autonomous invocation until you verify it — test in an isolated sandbox container or VM that has no access to your real accounts or home directory. 3) If you want similar functionality, prefer skills that explicitly declare required binaries and credentials (and limit them to the minimum necessary), or provide credentials with least privilege and separate test accounts. 4) Inspect and, if possible, audit any runtime commands the skill would run; remove or adapt hard-coded absolute paths. 5) If you lack confidence in the author or cannot sandbox, do not enable the skill for autonomous use and avoid granting access to production credentials or personal email accounts.

Type: OpenClaw Skill Name: steward-ops Version: 1.0.0 The steward-ops skill bundle is a highly sophisticated administrative 'Chief of Staff' system designed to manage a user's entire operational life, including email triage, financial monitoring, and platform session management. While the intent appears benign and includes robust 'Approval Tier' protocols (in COMPANY-INTEGRATION.md) to prevent unauthorized actions like sending or deleting emails, the bundle exhibits high-risk behaviors. Specifically, it uses CLI tools (himalaya, agentreach) to access sensitive data and contains hardcoded local file paths (e.g., /Users/oliverhutchins1/ in COMPANY-INTEGRATION.md), suggesting it is a specific user's configuration rather than a generalized skill. These risky capabilities, although plausibly needed for the stated purpose, meet the threshold for a suspicious classification.