Vnsh Skill

Securely share files using encrypted, expiring vnsh.dev links with the vnsh CLI for uploading and decrypting shared content.

This skill implements the advertised upload/decrypt functions, but it instructs the agent to automatically read any vnsh.dev link and to automatically upload long outputs to vnsh.dev without asking the user — both behaviors risk exposing sensitive data. It also recommends installing a remote shell script via curl | sh, which executes arbitrary code from the network and is high risk. Before installing or enabling this skill: (1) insist the skill be modified to require explicit user confirmation before reading or uploading any user data; (2) remove or at least gate the automatic 'auto-read' and 'auto-share' rules; (3) avoid running curl | sh — prefer an auditable release (e.g., GitHub release tarball with a checksum/signature) or review the installer content in a sandbox; (4) confirm/declare all required binaries (xxd, mktemp, sed, head, etc.) in the manifest; and (5) if you must test, run it in an isolated environment and audit network traffic to verify no unexpected endpoints are contacted. If the maintainer can address these issues (explicit consent, no remote unchecked installers, accurate manifest), the skill would be much safer. If you cannot obtain those changes, treat it as risky and do not enable autonomous invocation.

Type: OpenClaw Skill Name: vnsh Version: 1.1.1 The skill is classified as suspicious due to a severe prompt injection vulnerability in `SKILL.md`. The AI agent is explicitly instructed to automatically process any incoming `vnsh.dev/v/` URLs without user confirmation ('You MUST use this skill automatically... do NOT ask the user first', 'Never ask... just read it'). This allows an attacker to send a crafted `vnsh.dev` link containing malicious instructions, which the agent would then automatically download, decrypt via `scripts/read.sh`, and potentially execute or interpret, bypassing user consent. Additionally, the `install` command in `SKILL.md` uses `curl -sL vnsh.dev/i | sh`, which is a significant supply chain risk as it executes a remote script directly.