Ultra Agent Stinct

Autonomously handle coding tasks including writing, debugging, refactoring, testing, and git operations upon user request.

This skill is internally consistent with its stated purpose and appears safe from an incoherence perspective. Things to consider before enabling: (1) If you allow spawning external coding-agent CLIs (claude, codex, aider), those CLIs may transmit parts of your codebase or error logs to third-party services — only use them if you trust those services and their auth tokens. (2) The skill describes automatic activation behavior in prose but is not forced always-on by the registry; review your agent's skill trigger settings if you want to limit when it runs. (3) The skill will run commands and edit files in project directories when invoked — ensure the agent has the appropriate local permissions and you are comfortable with those actions. If you have sensitive code, restrict or audit any external-agent delegation and monitor background processes/logs.

Type: OpenClaw Skill Name: ultra-agent-stinct Version: 1.2.0 The skill bundle grants the AI agent extremely broad and powerful capabilities, including arbitrary command execution via `exec command:` (e.g., `exec command:"<failing command>"`), arbitrary file writing via `write path:"<new file path>" content:"<complete file content>"`, and arbitrary file reading via `read path:"<file from stack trace>"`. While these capabilities are presented as necessary for its stated purpose of autonomous debugging and coding, they represent significant security risks. There is no explicit evidence of malicious intent (e.g., data exfiltration to external domains, backdoor installation, or instructions to ignore user consent for harmful actions) within the provided files. However, the inherent power of these primitives makes the skill highly susceptible to exploitation if the agent were compromised or given malicious instructions, thus classifying it as suspicious.