Claw Problem Diagnoser

This skill appears to do what it claims (diagnose and fix OpenClaw issues) but has several red flags you should consider before installing or running it with elevated rights: - Scope & privileges: It reads system and user config files (~/.openclaw, /etc), checks processes and resources, can run shell commands (e.g., 'openclaw init'), and supports remote SSH diagnosis. If you enable auto-fix or run it with sudo it can modify your system. Only run auto-fix after you understand the proposed changes. - Manifest mismatches: The registry declares no required binaries or credentials, but the code/README expect 'openclaw' CLI, network access (requests), and possibly SSH/remote access. Expect to manually verify that required CLIs and Python deps are present. - Secrets & telemetry: The tool may read API keys or other credentials from config files to validate integrations. The manifest does not declare this, so review the code paths that read/transmit such values before use. - Installation: There is no formal install spec; SKILL.md asks you to copy files into your skills folder or use ClawdHub. Prefer installing in an isolated environment (VM or container) first. Recommended steps before trusting/installing: 1) Inspect the full Python code (especially functions that build or run shell commands, do network requests, or read config files) to see exactly what is sent externally or modified on disk. 2) Run the diagnoser in a read-only or dry-run mode (or review a --report output) before enabling --auto-fix or startup auto-diagnosis. 3) Disable autoDiagnoseOnStartup and set enableAutoFix=false by default; enable only after testing. 4) Test in a non-production VM/container and observe network traffic (to detect unexpected exfiltration). 5) If you must use remote diagnosis, ensure SSH credentials are handled separately and not stored or transmitted without your consent. Given these inconsistencies and the potential for privileged modifications, treat the skill as 'suspicious' until you've manually audited its code and tested it in a safe environment.