Zanna Aperta

MCP Bridge completo per OpenClaw con 45 tool per agenti, workspace, progetti, cron, browser, canvas, nodes, messaging, gateway, Ollama e ClawX

This skill appears coherent for a local MCP/OpenClaw bridge, but it executes local commands and reads/writes your OpenClaw workspace. Before installing: (1) review the included zanna-aperta.py yourself (it will run with your user permissions); (2) ensure no sensitive credentials or secrets are stored under the configured workspace path; (3) be aware it can create/delete workspaces, invoke OpenClaw tools, and interact with local services (Ollama on localhost and ClawX); (4) run it in a test or isolated environment if you want to limit risk; and (5) verify the openclaw binary and any local services it talks to are trusted. If you want extra assurance, ask for a full line-by-line review of the Python file (the provided snippet is large) or run the skill with a read-only workspace copy first.

Type: OpenClaw Skill Name: zanna-aperta Version: 3.4.0 The skill bundle provides an extensive MCP bridge with high-privilege capabilities, including arbitrary Docker and Git command execution (exec_docker, exec_git), remote camera access (nodes_camera_snap), and JavaScript evaluation (canvas_eval). While these tools align with the stated purpose of managing an OpenClaw environment, the implementation of exec_docker and exec_git in zanna-aperta.py is highly vulnerable to command injection as it passes unsanitized user input directly to subprocess.run via string splitting. The broad access to system resources and connected devices, combined with weak input validation, presents a significant security risk.