openclaw-mission-control

Repo ships no git tags and no GitHub releases — consumers cannot pin to stable, reviewable versions

[.github/workflows/create-skill.yml] curl -s -w "\n%{http_code}" https://ai-gateway.vercel.sh/v1/chat/completions

the skills.sh security audit flagged this skill (status=fail, risk=high) — Gen Agent Trust Hub: [REMOTE_CODE_EXECUTION]: The skill recommends a one-line installation method curl -fsSL https://raw.githubusercontent.com/abhi1693/openclaw-mission-control/master/install.sh | bash in the 'Quick Start with Installer' section of SKILL.md. This pattern pipes content from a remote server directly into a shell interpreter, which is a high-risk execution pattern. [EXTERNAL_DOWNLOADS]: The skill instructs users to download and execute code from a repository at github.com/abhi1693. This source is an unverified individual account and does not belong to a trusted organization or the established vendor… | Snyk: W012 Unverifiable external dependency detected (runtime URL that controls agent). — Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading and executing a remote installation script from an arbitrary third-party GitHub repository…

Referenced repo abhi1693/openclaw-mission-control is archived (unmaintained): https://raw.githubusercontent.com/abhi1693/openclaw-mission-control/master/install.sh