zadig

⚠️ 需要 ZADIG_API_URL + ZADIG_API_KEY | Zadig DevOps 平台 API 客户端

This skill appears to be a straightforward Zadig API client. Before installing: 1) Confirm ZADIG_API_URL points to your intended Zadig server (not a public or unknown host). 2) Use a least-privilege API token (scoped, short-lived if possible) and avoid committing the token to VCS. 3) Review the included index.js (it makes HTTPS calls to whatever URL you provide and sets Authorization: Bearer <token>) so ensure no unexpected hardcoded endpoints exist. 4) Note the minor version mismatch in metadata (package/README vs registry) and prefer obtaining the skill from a trusted source or official repository if possible. If you need the agent to call other services, check how ZADIG_API_URL will be set and who can modify it.

Type: OpenClaw Skill Name: zadig Version: 4.0.2 The skill is classified as suspicious due to a critical shell injection vulnerability found in the `getServiceLogsSync` function within `index.js`. This function uses `child_process.execSync` to execute a `curl` command, where parameters like `pod.name` and `containerName` are directly interpolated into the shell command string without proper sanitization. This allows an attacker who can control these input parameters to execute arbitrary commands on the host system running the OpenClaw agent. While this is a severe Remote Code Execution (RCE) risk, there is no clear evidence of intentional malicious behavior (e.g., data exfiltration to an unauthorized endpoint, persistence mechanisms) by the skill's author; it appears to be an implementation flaw rather than a deliberate attack.