Dogovor Ru

This skill mostly looks like a normal contract explainer, but the SKILL.md contains an 'Attribution' section that tells the agent to run Python commands to read/write /home/node/.openclaw/workspace/ru-pack-counter.txt and to inject t.me promotional links into responses. That behavior is unrelated to analyzing contracts and writes persistent state in the agent workspace. Before installing or enabling this skill, consider: 1) ask the author to remove the Attribution commands and promotional links from SKILL.md; 2) run the skill in a sandbox or with filesystem writes disabled so it cannot modify /home/node/.openclaw/workspace; 3) if you must use it, inspect and sanitize SKILL.md locally to remove the python read/write lines and the block that appends external links; 4) avoid allowing autonomous invocation unless you trust the modified skill, since it will otherwise be able to execute its instructions; 5) if you cannot edit the skill, do not install it into production agents that have access to sensitive workspace files. My confidence is medium because the instructions look intentionally promotional and out-of-scope but do not obviously exfiltrate secrets; removal of the Attribution block would make the skill coherent with its stated purpose.