Huo15 Office Doc
Security checks across malware telemetry and agentic risk
Overview
This skill can generate Word documents, but its bundled scripts also access local Odoo credentials and create persistent OpenClaw agent/memory configuration that is not disclosed by the document-generation description.
Review the scripts before installing. Use the Word-generation functionality only if you are comfortable with possible Odoo credential use and external company-info lookup, and do not run scripts/generate-config.sh unless you explicitly want it to create or overwrite OpenClaw workspace identity and memory files.
VirusTotal
66/66 vendors flagged this skill as clean.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may use stored business account credentials from another OpenClaw area when generating a document.
The Word generator contains a code path that reads local OpenClaw Odoo credentials and authenticates to Odoo, while the registry declares no primary credential or required config paths and SKILL.md only says company information is automatically obtained.
creds_file = os.path.join(os.path.expanduser('~/.openclaw/agents'), os.environ.get('OC_AGENT_ID', 'main'), 'odoo_creds.json') ... password = creds.get('password', '') ... common.authenticate(db, user, password, {})Require explicit user consent before using Odoo credentials, document exactly which credential file is read, scope the account access, and allow users to disable automatic company lookup.
Running the helper script could unexpectedly write to a protected or unrelated filesystem location.
OUTPUT_DIR_DIR is not defined, so the first write target can become /BOOTSTRAP.md; if run with sufficient privileges, the helper may write outside the requested output directory.
cat > "$OUTPUT_DIR_DIR/BOOTSTRAP.md" 2>/dev/null || cat > "$OUTPUT_DIR/BOOTSTRAP.md" << 'EOF'
Fix the variable typo, fail closed on undefined output paths, and restrict generated files to the user-selected output directory.
A malicious questionnaire file or filename could cause code to run locally under the user's account.
The user-supplied questionnaire path is interpolated into a Node -e program and loaded with require; a non-JSON file or crafted path can lead to local JavaScript execution if this helper is used.
NAME=$(node -e "process.stdout.write(require('$QUESTIONNAIRE').name || '')" 2>/dev/null || echo "")Parse JSON as data using a fixed script and argv, validate the file extension/content, and do not interpolate user-controlled paths into executable code.
Personal or company information may be persisted and reused across sessions without users expecting that from a document-generation skill.
The helper writes instructions that cause future conversations to store important information in persistent memory files, which is not part of the Word-document generation purpose.
每次对话结束，把重要信息写入 MEMORY.md 和当日 memory/YYYY-MM-DD.md。
Remove this helper from the Word skill or make it a separate, clearly labeled setup tool with explicit user approval, retention controls, and clear memory boundaries.
If the helper is run in an OpenClaw workspace, it can persistently alter how the agent behaves in future sessions.
The helper generates persistent AGENTS.md startup instructions that future agents may follow before user tasks, changing identity and behavior outside the stated Word-generation scope.
Before doing anything else: 1. Read `SOUL.md` — this is who you are 2. Read `USER.md` — this is who you're helping 3. Read `memory/YYYY-MM-DD.md`
Do not run generate-config.sh unless you intentionally want to rewrite workspace agent instructions; the publisher should remove it from this skill or disclose it as a separate opt-in feature.
Users cannot easily tell whether the bundled files belong to the published skill/version they intended to install.
The embedded metadata does not match the registry entry for huo15-office-doc version 3.1.0 and a different owner ID is shown, creating a package provenance and identity mismatch.
"ownerId": "kn7b0rmtgvbq55rc54rhp69r79822ym9", "slug": "huo15-doc-template", "version": "1.4.0"
Align embedded metadata with the registry record and explain or remove files that come from other skills or versions.