tenk-connect

Connect your TenK account to your AI assistant. Log practice sessions, check progress, and manage your 10,000-hour journey from chat.

This skill appears to do exactly what it says: it runs a local CLI script that uses the TenK API and stores a bearer token in ~/.config/tenk-connect/token (file permission 600). Before installing, verify you trust the TenK service (tenk.oventlabs.com) and the skill author (SKILL.md/README point to a GitHub repo). Ensure curl and python3 are available, and remember that the stored token grants access to your TenK account for its lifetime — revoke it from your TenK account if you uninstall or suspect misuse. The registry metadata omitted required binaries; that mismatch is not malicious but worth double-checking. If you want stronger isolation, inspect the script yourself before running and consider running auth steps in a controlled environment.

Type: OpenClaw Skill Name: tenk-connect Version: 1.0.2 The skill bundle contains a critical Python code injection vulnerability in `scripts/tenk.sh`. User-controlled input (`skill_query`) is directly interpolated into a Python string within `python3 -c` calls in the `cmd_log` function, allowing for arbitrary Python code execution and potential shell injection (RCE). While this is a severe flaw, there is no clear evidence of intentional malicious behavior such as data exfiltration to unauthorized endpoints, persistence mechanisms, or obfuscation. All network calls are directed to the legitimate `tenk.oventlabs.com` domain, and token handling appears standard. The issue is a lack of input sanitization, classifying it as a vulnerability rather than intentional malware.