Skill Updater

Updates a specific skill within a repository and triggers the automated publishing pipeline. Use when the user wants to release a new version of a single skill.

This skill will run whatever scripts/release.sh exists in the repository path you provide — that script can do anything (including push code, read files, or send data to external servers). Before using the skill: 1) inspect the target repository's scripts/release.sh (and any scripts it calls) so you understand exactly what will run; 2) avoid pointing it at sensitive system or root paths; 3) run the release script manually first (or in an isolated CI environment) to confirm behavior; 4) ensure any tokens used (GITHUB_TOKEN, deploy keys) follow least privilege and are not broadly available to the agent; 5) if you don't trust the repo or cannot review the release script, do not run this skill. Additional information that would reduce concern: explicit documentation of required credentials and a safer execution mode (dry-run, sandbox, or validation of the release script) or code that restricts which repository paths are allowed.

Type: OpenClaw Skill Name: wells1137-skill-updater Version: 1.0.0 The `scripts/update.sh` file is highly suspicious due to a critical arbitrary script execution vulnerability. It prompts the user for a `REPO_PATH` and then executes `bash "$REPO_PATH/scripts/release.sh"` within that user-provided directory. This allows a malicious user to specify a path to a repository containing their own crafted `release.sh` script, leading to arbitrary code execution on the system running the agent. While the arguments passed to `release.sh` are quoted, the path to the script itself is unsanitized user input, making it a severe shell injection risk.