Venice Admin

Venice AI account administration - check balance, view usage history, and manage API keys. Requires an Admin API key.

This skill appears coherent with its stated purpose, but take these precautions before installing: 1) Only use a genuine Admin API key when you explicitly need admin operations (do not use it for routine inference). 2) Verify the 'uv' brew formula comes from a trusted source before installing, since 'uv' will run the Python scripts and install dependencies. 3) Review the included scripts if you have any doubt — they are short and only call api.venice.ai endpoints and read VENICE_API_KEY. 4) Avoid committing your Admin key to source control and consider using an inference-only key for day-to-day tasks.

Type: OpenClaw Skill Name: venice-admin Version: 1.0.1 The skill bundle appears to be designed for its stated purpose of Venice AI account administration. However, the `scripts/usage.py` script includes an `--output` argument that allows writing the usage history to an arbitrary file path specified by the user. While this is a common feature, the `Path(output_file).resolve()` call means an agent, if susceptible to prompt injection, could be instructed to write data to sensitive system files (e.g., `/etc/passwd`, `~/.ssh/authorized_keys`) or other unintended locations. This capability represents a file write vulnerability that could be exploited via prompt injection, classifying the skill as suspicious rather than benign, despite the lack of clear malicious intent within the skill's code itself.