Skill Search

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 9:09 PM UTC
• Version: 1.1.0

Overview

This skill is a local skill-discovery helper with some overstated documentation, but its behavior is disclosed, local, and purpose-aligned.

Before installing, understand that this skill builds and keeps a local index of installed skill metadata and absolute skill paths. Treat its recommendations as search results, not authoritative safety decisions, because the advertised LLM/BM25-style matching is overstated in the current implementation.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Memory Poisoning: Persistent Context Injection, Context Window Stuffing, Memory Manipulation
• Rogue Agent: Self-Modification, Session Persistence
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger

Findings (28)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 95% confidence

Finding

The skill claims hybrid BM25+semantic search and LLM-powered task matching, but the described behavior appears narrower and may not implement those features. This mismatch is dangerous because agents may trust the declared capability model, invoke the skill in higher-trust contexts, or make decisions based on nonexistent safeguards or ranking logic.

Content

No source excerpt is available for this finding.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 127)May include surrounding context.

md

- `skills_index.json` — Searchable skill metadata

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 89% confidence

Finding

The skill advertises executable scripts and persistent index files but declares no explicit tool scope or allowed-tools boundary. In an agentic environment, this can lead to over-broad access to shell, file reads, and file writes when the skill is invoked, increasing the blast radius if the skill is misused or chained with other prompts.

Content

No source excerpt is available for this finding.

Shadow Command Trigger

Medium

• Category: Trigger Abuse
• Confidence: 84% confidence

Finding

The trigger phrase 'search skills' overlaps with a built-in 'search' command, creating a shadowing risk where the wrong capability may be invoked. In agent systems, command ambiguity can be exploited through prompt phrasing to steer execution into a tool with broader shell/file behaviors than the user or orchestrator intended.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

Several trigger phrases such as 'find a skill' or 'what skill should I use' are broad enough to overlap with normal conversation, making accidental or premature invocation more likely. Because this skill can drive shell execution and local file access indirectly through its scripts, unintended activation expands attack surface and may cause unnecessary indexing, reads, or writes.

Content

No source excerpt is available for this finding.

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 60% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 44)May include surrounding context.

2. Semantic Search (Meaning-based)

bash

./scripts/skill_search.py semantic "automate web browsing"
./scripts/skill_search.py semantic "create images with AI"
./scripts/skill_search.py semantic "search my past conversations"

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 80% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · index/skills_index.json (reported line 1)May include surrounding context.

json

[{"name": "1password", "folder": "1password", "description": "Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.", "triggers": [], "location": "/usr/local/lib/node_modules/openclaw/skills/1password", "search_text": "1password set up and use 1password cli (op). use when installing the cli, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op. 1password cli references workflow", "embedding": [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.08873565094161139, 0.04436782547080569, 0.13310347641241707, 0.04436782547080569, 0.08873565094161139, 0.17747130188322277, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.08873565094161139, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.17747130188322277, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.08873565094161139, 0.08873565094161139, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.04436782547080569, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.0, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.04436782547080569, 0.0, 0.0, 0.0, 0.0, 0.08873565094161139, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.13310347641241707, 0.0, 0.04436782547080569, 0.13310347641241707, 0.0, 0.0, 0.0, 0.04436782547080569, 0.0, 0.04436782547080569, 0.04436782547080569, 
...[truncated 28 chars]

Context-Inappropriate Capability

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The manifest describes this skill as finding and matching skills, but the indexed records also include each skill's absolute location path such as /usr/local/lib/node_modules/... and /data/.openclaw/workspace/.... Returning or relying on full local paths goes beyond ordinary search metadata and can disclose host filesystem layout unrelated to skill discovery.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

This JSON manifest is in scope for vague-trigger checks, and many entries rely on broad natural-language descriptions like "Use when..." while the explicit "triggers" field is empty throughout L1. Without a concrete trigger list, exclusion conditions, or negative examples, invocation scope is underspecified and may cause unintended skill matching.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

The index includes descriptions for skills that can handle secrets, send messages, manage notes, place food orders, control external services, and perform other user-impacting actions, but the manifest text shown at L1 generally does not warn about privacy, data transmission, or potentially destructive effects. For a manifest-like skill description surface, this omission can leave users unaware of behaviors affecting their data or external accounts.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.