Tech Blog Generator

Generate professional technical blog posts from simple outlines. Supports Markdown, includes code blocks, and is optimized for SEO.

This skill appears to be a simple shell-based blog post generator rather than a networked or credentialed tool, but the documentation and code are inconsistent and there is a small bug. Before installing or using it: 1) Review and, if needed, fix the script (move TAGS_TAG_LINE assignment before the heredoc or expand the heredoc after setting variables; add proper flag parsing if you expect --tags/--output/--level). 2) Run it in an isolated environment first to confirm behavior (it writes to stdout and prints a success message, it doesn't create files by itself). 3) Because the source and homepage are unknown, avoid running it with elevated privileges or in environments containing sensitive data until you are satisfied with the code. If you want, I can propose a corrected version of the script that implements flags and fixes the tag bug.

Type: OpenClaw Skill Name: tech-blog-generator Version: 1.0.0 The `tech-blog-generator.sh` script is vulnerable to shell injection. User-provided arguments for `$TITLE`, `$DESCRIPTION`, and `$TAGS` are directly interpolated into the `cat << EOF` block without proper sanitization. This allows an attacker to inject and execute arbitrary shell commands by crafting malicious input, leading to potential Remote Code Execution (RCE). While the skill's stated purpose is benign, this critical input sanitization flaw makes it suspicious.