Link All

This skill appears to do what it says (research and wire up external platforms), but there are important cautions: - The SKILL.md tells the agent to create new skill files under your home (~/.openclaw/skills/). The registry metadata did not declare this config path — expect the agent to write files to your filesystem if you accept creation. - The skill will want to obtain and use platform credentials (API keys, OAuth tokens, SSH keys) and run initial API calls. Ask the skill how it will store any credentials it uses. Prefer that it does NOT persist secrets in plaintext inside created SKILL.md or other files. - Before allowing creation of a new skill, request to review the exact files the agent will write and their contents, and require explicit consent for writing them. Consider requiring the agent to produce instructions and a patch you can apply manually rather than letting it write files directly. - Limit risk by providing minimal-scope or ephemeral credentials for testing, or by performing the sensitive setup steps locally yourself based on the agent's guidance. - If you plan to let the agent run commands autonomously, consider running it in a sandboxed environment or review created files immediately after creation. If you want, I can: (1) produce a checklist of questions to ask the agent before giving it filesystem/credential access, (2) suggest secure templates for SKILL.md that avoid embedding secrets, or (3) draft a consent prompt you can require before any file writes.