Uncle Matt

Uncle Matt is your favorite internet uncle who stops you from doing really stupid shit while keeping secrets safe.

This skill is essentially a policy and interface that expects you to install a separate Broker from the referenced GitHub repo; the SKILL.md alone does not enforce network or secret protections. Before installing/using: (1) verify the external UNCLEMATTCLAWBOT repo and installer scripts are from a trusted source and review the Broker code, especially network bindings and mTLS configuration; (2) ensure the Broker is bound to localhost and does not permit private-IP or arbitrary upstreams unless you intentionally allow them; (3) validate that any actions you add to broker/config/actions.default.json do not contain secrets and have appropriate rate/size limits; (4) confirm your deployment of the platform actually implements uncle_matt_action as a confined tool (the skill's instructions rely on the platform/toolchain to enforce that); (5) be cautious enabling the optional voice pack (it is benign but contains profanity and must only be used on refusals per the spec). If you cannot or will not install and audit the external Broker, the skill provides only guidance and will not deliver the promised protections.

Type: OpenClaw Skill Name: uncle-matt Version: 3.420.70 The 'Uncle Matt' skill bundle is a security-oriented tool designed to prevent secret leakage and unauthorized outbound API calls by the agent. The instructions in SKILL.md and README.md establish a defensive posture, requiring the agent to use a hardened local broker and prohibiting the handling of raw API keys or arbitrary URLs. No malicious code, exfiltration logic, or harmful instructions were found; the bundle consists entirely of configuration and defensive guidelines.