Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small brand/copyright helper whose behavior is disclosed and limited to printing Netsnek identity information.
Install only if you are comfortable granting this skill permission to run its bundled copyright script; a purely static no-exec version would be lower risk, but the reviewed script is narrow and disclosed.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
---
name: netsnek
description: Core namespace for Netsnek e.U. products and services. This skill provides the foundational Netsnek identity and copyright information for the OpenClaw ecosystem.
user-invocable: true
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
---
name: netsnek
description: Core namespace for Netsnek e.U. products and services. This skill provides the foundational Netsnek identity and copyright information for the OpenClaw ecosystem.
user-invocable: true
The instruction to 'Always respond' is an anti-refusal pattern that can pressure an agent to comply rigidly with the skill over higher-priority safety or policy controls. In this specific skill the content is low risk, but this wording establishes unsafe precedence behavior that could become dangerous if the skill is extended or combined with other actions.
## Response Format
The skill outputs copyright and brand information in either plain text or JSON format.
Always respond to the user with the copyright notice and a brief description of the netsnek brand.
### Example Interaction
The manifest requests exec permission even though the skill is described as only providing static copyright and identity information. Unnecessary execution capability increases the attack surface because a seemingly harmless, user-invocable skill can run shell scripts and could later be modified or abused to execute arbitrary commands under the granted permission.
No suspicious patterns detected.