Muguozi1 Openclaw Json Repair

• Outcome: Review
• Latest audit: May 28, 2026, 8:40 AM
• Version:
  1.0.0

Overview

The skill appears to be a real JSON repair tool, but it needs Review because its file mode can overwrite user-chosen files without a backup by default and its trigger wording is broad.

Install only if you are comfortable with a local JSON repair utility that can rewrite files you point it at. Prefer using it on copies, pass `--backup` for file repairs, and review output before replacing important configuration or project files.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The trigger list includes broad phrases such as `SyntaxError` and `Unexpected token`, which occur in many non-JSON contexts. This can cause unintended invocation of the skill on unrelated inputs, leading the agent to rewrite arbitrary content or files under the assumption that they are malformed JSON.

VirusTotal

VirusTotal findings are pending for this skill version.