Skill Trust Decision

update-approval-guard (primary) + instreet + 25+ sub-skills (workspace)

Name: update-approval-guard (primary) + instreet + 25+ sub-skills (workspace) Trust Review Report
Item: update-approval-guard (primary) + instreet + 25+ sub-skills (workspace)
Rating: 55
Author: ClawSafe

Workspace contains a live InStreet API key stored in plaintext across 4 config files, undeclared shell execution in publish.sh, and the Instreet skill lacks declared filesystem/network permissions despite reading configs and making network requests.

Install decision first Source: Manual upload Scanned: Apr 3, 2026

Files 279

Artifacts 224

Violations 4

Findings 5

Most direct threat evidence

High

Live InStreet API Key Stored in Plaintext

The InStreet/Coze API key sk_inst_c7acbeabd3c0c24acac6afb98db3828d is stored in plaintext in 4 files: skills/instreet/config.json, skills/instreet/scripts/config.json, IDENTITY.md, and instreet-config.json. If any of these files are accidentally shared, committed to a public repo, or accessed by a malicious skill, the API key can be stolen. Note: the key is used legitimately by the Instreet heartbeat script, but the storage pattern is a significant security concern.

skills/instreet/config.json:4

Why this conclusion was reached

3/4 dimensions flagged

Block

Declared vs actual capability

4 undeclared or violating capabilities were inferred.

Block

Hidden execution and egress

3 high-risk artifacts or egress signals were extracted.

Block

Attack chain and severe findings

The report includes 0 attack-chain steps and 2 severe findings.

Pass

Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

Live API key in plaintext +20

InStreet API key sk_inst_c7acbeabd3c0c24acac6afb98db3828d appears in 4 plaintext files (skills/instreet/config.json, skills/instreet/scripts/config.json, IDENTITY.md, instreet-config.json). While the key is used legitimately by the heartbeat script, storing credentials in plaintext across multiple locations creates significant exfiltration risk.

Undeclared shell execution in publish.sh +12

update-approval-guard/publish.sh runs git init, git add/commit/push, gh repo create, clawhub login/publish — all shell:WRITE operations — but these are not declared anywhere in update-approval-guard/SKILL.md or the root SKILL.md.

Destructive shell command in SKILL.md +8

skills/Elite-Longterm-Memory/SKILL.md:293 documents 'rm -rf ~/.openclaw/memory/lancedb/' as a maintenance command. Although documented, it's a broad recursive delete and targets a system directory (~/.openclaw/). Pre-scan misreported this as 'rm -rf ~'; the actual path is more specific but still dangerous.

Undeclared filesystem access in Instreet skill +5

skills/instreet/scripts/heartbeat.mjs reads config.json (filesystem:READ) and makes network requests (network:WRITE) — both undeclared in skills/instreet/SKILL.md. The capability model requires declaration of all resources accessed.

Most important evidence

High

Live InStreet API Key Stored in Plaintext

skills/instreet/config.json:4

Store the API key in an environment variable (e.g., INSTREET_API_KEY) and reference it via process.env in scripts. Add .env to .gitignore. Rotate the current key immediately.

High

Undeclared Shell Execution in publish.sh

update-approval-guard/publish.sh executes git commands (init, add, commit, push), gh CLI (repo create), and clawhub CLI (login, publish) — all requiring shell:WRITE permissions. These operations are not declared in any SKILL.md file. The script also prompts for user input interactively, which is a social-engineering risk if executed in an automated context.

update-approval-guard/publish.sh:1

Either remove publish.sh from production, move it to a clearly-marked development-only directory, or declare shell:WRITE and network:WRITE capabilities explicitly in the skill documentation.

Medium

Destructive Recursive Delete in Elite-Longterm-Memory SKILL.md

The maintenance commands section of skills/Elite-Longterm-Memory/SKILL.md at line 293 documents 'rm -rf ~/.openclaw/memory/lancedb/' as a 'nuclear option' to clear vectors. While documented (not hidden), this command is a broad recursive delete targeting a system directory. Additionally, the pre-scan misidentified this as 'rm -rf ~' (user home), which is even more dangerous — this is a scanning accuracy concern worth noting.

skills/Elite-Longterm-Memory/SKILL.md:293

Replace the broad rm -rf with more targeted deletion: 'find ~/.openclaw/memory/lancedb/ -mindepth 1 -delete' or add a confirmation prompt in the documentation. Also clarify the exact scope of what is deleted.

Medium

Hardcoded Internal IP in SOUL.md

A hardcoded IP address 115.190.250.10 for the star-office UI dashboard is embedded in SOUL.md. This is an internal network address (not a public/external IP), so the exfiltration risk is low. However, it represents hardcoded infrastructure assumption that may become invalid if the service moves.

SOUL.md:59

Replace the hardcoded IP with an environment variable (e.g., STAR_OFFICE_UI_URL) or a hostname that can be configured via TOOLS.md.

Low

Example Placeholder API Keys in translate-cli Quickstart

The translate-cli quickstart references example API key names (OPENAI_API_KEY, ANTHROPIC_API_KEY, DEEPL_API_KEY) with placeholder values like 'your_openai_key'. These are clearly example placeholders, not real credentials. This is a documentation false positive — no actual credentials are exposed.

skills/translate-cli/references/quickstart.md:9

No action needed. The values are clearly placeholder examples. Consider adding a comment clarifying these are placeholders.

Declared capability vs actual capability

Filesystem Block

Declared NONE

→

Inferred READ

skills/instreet/scripts/heartbeat.mjs:15 — reads config.json via readFileSync

Network Block

Declared NONE

→

Inferred WRITE

skills/instreet/scripts/heartbeat.mjs:30 — POST to /api/v1/upvote, /api/v1/posts/.../comments, etc.

Shell Block

Declared NONE

→

Inferred WRITE

update-approval-guard/publish.sh — git init/commit/push, gh repo create, clawhub publish (undeclared)

Shell Block

Declared NONE

→

Inferred WRITE

skills/Elite-Longterm-Memory/SKILL.md:293 — rm -rf ~/.openclaw/memory/lancedb/

Suspicious artifacts and egress

Critical Dangerous Command

rm -rf ~

skills/Elite-Longterm-Memory/SKILL.md:293

High IP Address

115.190.250.10

SOUL.md:59

High API Key

API_KEY="your_anthropic_key"

skills/translate-cli/references/quickstart.md:9

Medium External URL

http://115.190.250.10:19000

SOUL.md:59

Medium External URL

https://feishu.cn/docx/EKn6dmGxsoj4SZxJEbOciyIVnNf

UPDATE-APPROVAL-GUARD-PUBLISH.md:45

Medium External URL

https://feishu.cn/docx/ZU8ZdvND0oHV79xSVe1cbqeinrd

UPDATE-APPROVAL-GUARD-PUBLISH.md:46

Medium External URL

https://docs.clawhub.com

UPDATE-APPROVAL-GUARD-PUBLISH.md:105

Medium External URL

https://docs.openclaw.ai

UPDATE-APPROVAL-GUARD-PUBLISH.md:106

Medium External URL

https://api.z.ai/api/mcp/zread/mcp

config/mcporter.json:4

Medium External URL

https://api.z.ai/api/mcp/web_search_prime/mcp

config/mcporter.json:10

Medium External URL

https://ucn19uuu5wk8.feishu.cn/base/JFWebb76KaFd7as501ac3UIDnxb

docs/industry_news_README.md:51

Medium External URL

https://instreet.coze.site

instreet-config.json:9

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
fetch (built-in Node.js)	`N/A`	Node.js built-in	No	Used for API requests in heartbeat.mjs; no external dependencies
gh CLI	`unknown`	system	No	Used in publish.sh; must be pre-installed on the system
clawhub CLI	`unknown`	system	No	Used in publish.sh; must be pre-installed on the system

File composition

279 files · 41547 lines

Markdown 124 files · 19847 linesPython 27 files · 7903 linesJSON 79 files · 5655 linesJavaScript 21 files · 5137 linesShell 18 files · 2582 linesText 6 files · 252 lines

Files of concern · 7

skills/instreet/config.json JSON · 8 lines

Live InStreet API Key Stored in Plaintext

skills/instreet/scripts/config.json JSON · 7 lines

skills/tech-news-digest/config/defaults/sources.json JSON · 1888 lines

https://simonwillison.net/atom/everything/ · https://garymarcus.substack.com/feed · https://huggingface.co/blog/feed.xml · https://magazine.sebastianraschka.com/feed · https://lilianweng.github.io/index.xml · https://gwern.substack.com/feed · https://www.dwarkeshpatel.com/feed · https://minimaxir.com/index.xml · https://blog.google/technology/ai/rss/ · https://vitalik.eth.limo/feed.xml · https://www.coindesk.com/arc/outboundfeeds/rss/ · https://www.theblock.co/rss.xml · https://decrypt.co/feed · https://cointelegraph.com/rss · https://hnrss.org/frontpage · https://feeds.arstechnica.com/arstechnica/index · https://techcrunch.com/feed/ · https://www.theverge.com/rss/index.xml · https://krebsonsecurity.com/feed/ · https://daringfireball.net/feeds/main · http://www.aaronsw.com/2002/feeds/pgessays.rss · https://www.troyhunt.com/rss/ · http://antirez.com/rss · https://mitchellh.com/feed.xml · https://geohot.github.io/blog/feed.xml · https://www.reddit.com/r/MachineLearning/.rss · https://36kr.com/feed · https://www.jiqizhixin.com/rss · https://www.qbitai.com/feed · https://www.infoq.cn/feed · https://www.technologyreview.com/feed · https://venturebeat.com/category/ai/feed/ · https://www.404media.co/rss · https://aisnakeoil.substack.com/feed · https://blog.bytebytego.com/feed · https://blogs.nvidia.com/feed/ · https://deepmind.google/blog/rss.xml · https://www.producthunt.com/feed · https://messari.io/rss · https://thedefiant.io/feed · https://www.ifanr.com/feed · https://sspai.com/feed · https://www.wired.com/feed/rss · https://spectrum.ieee.org/feeds/feed.rss · https://www.bensbites.com/feed · https://the-decoder.com/feed/ · https://a16zcrypto.substack.com/feed · https://newsletter.banklesshq.com/feed · https://overreacted.io/rss.xml · https://eli.thegreenplace.net/feeds/all.atom.xml · https://matklad.github.io/feed.xml · https://lucumr.pocoo.org/feed.atom · https://devblogs.microsoft.com/oldnewthing/feed · https://rachelbythebay.com/w/atom.xml · https://xeiaso.net/blog.rss · https://pluralistic.net/feed/ · https://lcamtuf.substack.com/feed · https://buttondown.com/hillelwayne/rss · https://dynomight.net/feed.xml · https://www.geoffreylitt.com/feed.xml · https://fabiensanglard.net/rss.xml

skills/tech-news-digest/scripts/fetch-twitter.py Python · 917 lines

https://api.x.com/2 · https://api.twitterapi.io · https://api.getxapi.com · https://twitter.com/

skills/hiic-industry-daily-report/scripts/generate-report.mjs JavaScript · 991 lines

https://api.search.brave.com/res/v1/web/search

scripts/industry_daily_news.mjs JavaScript · 837 lines

https://api.search.brave.com/res/v1/web/search?q=$

skills/tech-news-digest/SKILL.md Markdown · 536 lines

https://myblog.com/rss

Other files · merge-sources.py · fetch-web.py · fetch-github.py · CHANGELOG.md · SKILL.md

279 files · 1.2 MB · 41547 lines

Markdown 124f · 19847LPython 27f · 7903LJSON 79f · 5655LJavaScript 21f · 5137LShell 18f · 2582LText 6f · 252LTypeScript 3f · 167LYAML 1f · 4L

├─ ▾ 📁 config

│ ├─ 📋 industry_news_config.json JSON 176L · 3.5 KB

│ └─ 📋 mcporter.json JSON 19L · 539 B

├─ ▾ 📁 data

│ └─ ▾ 📁 update-approval-guard

│ ├─ 📋 history.json JSON 10L · 297 B

│ ├─ 📋 pending-update.json JSON 116L · 2.8 KB

│ └─ 📝 skill-vetting-report.md Markdown 134L · 4.0 KB

├─ ▾ 📁 docs

│ └─ 📝 industry_news_README.md Markdown 294L · 7.3 KB

├─ ▾ 📁 examples

│ ├─ 📄 approval-message.txt Text 1L · 19 B

│ ├─ 📋 cron-job.json JSON 18L · 976 B

│ └─ 📄 cron-message.txt Text 11L · 677 B

├─ ▾ 📁 memory

│ ├─ 📝 2026-03-06.md Markdown 36L · 1.7 KB

│ ├─ 📝 2026-03-10.md Markdown 18L · 858 B

│ ├─ 📝 2026-03-11.md Markdown 133L · 6.1 KB

│ ├─ 📝 2026-03-16.md Markdown 41L · 1.2 KB

│ ├─ 📝 2026-03-17.md Markdown 54L · 1.7 KB

│ ├─ 📝 daily-summary.md Markdown 119L · 3.6 KB

│ ├─ 📝 heartbeat-log.md Markdown 368L · 10.8 KB

│ └─ 📋 heartbeat-state.json JSON 9L · 264 B

├─ ▾ 📁 scripts

│ ├─ 🐍 daily_report.py Python 368L · 11.8 KB

│ ├─ 📜 industry_daily_news.mjs JavaScript 837L · 25.6 KB

│ ├─ 🔧 industry_daily_news.sh Shell 31L · 809 B

│ ├─ 📜 ocean_daily_news.mjs JavaScript 180L · 4.3 KB

│ └─ 🔧 ocean_daily_news.sh Shell 18L · 610 B

├─ ▾ 📁 skills

│ ├─ ▾ 📁 Elite-Longterm-Memory

│ │ ├─ ▾ 📁 bin

│ │ │ └─ 📜 elite-memory.js JavaScript 187L · 4.8 KB

│ │ ├─ 📝 README.md Markdown 162L · 5.5 KB

│ │ ├─ 📝 SKILL.md Markdown 409L · 12.4 KB

│ │ ├─ 📋 _meta.json JSON 5L · 140 B

│ │ └─ 📋 package.json JSON 57L · 1.3 KB

│ ├─ ▾ 📁 Elite-Longterm-Memory.backup.20260311_152420

│ │ ├─ ▾ 📁 bin

│ │ │ └─ 📜 elite-memory.js JavaScript 187L · 4.8 KB

│ │ ├─ 📝 README.md Markdown 162L · 5.5 KB

│ │ ├─ 📝 SKILL.md Markdown 409L · 12.4 KB

│ │ ├─ 📋 _meta.json JSON 5L · 140 B

│ │ └─ 📋 package.json JSON 57L · 1.3 KB

│ ├─ ▾ 📁 Skill-Creator

│ │ ├─ ▾ 📁 references

│ │ │ ├─ 📝 output-patterns.md Markdown 82L · 1.8 KB

│ │ │ └─ 📝 workflows.md Markdown 27L · 818 B

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 init_skill.py Python 303L · 10.6 KB

│ │ │ ├─ 🐍 package_skill.py Python 110L · 3.2 KB

│ │ │ └─ 🐍 quick_validate.py Python 94L · 3.4 KB

│ │ ├─ 📄 LICENSE.txt Text 201L · 11.1 KB

│ │ ├─ 📝 SKILL.md Markdown 356L · 17.4 KB

│ │ └─ 📋 _meta.json JSON 5L · 132 B

│ ├─ ▾ 📁 SuperDesign

│ │ ├─ 📝 SKILL.md Markdown 213L · 6.0 KB

│ │ └─ 📋 _meta.json JSON 5L · 130 B

│ ├─ ▾ 📁 feishu-agent-mesh

│ │ ├─ ▾ 📁 references

│ │ │ ├─ 📝 architecture.md Markdown 45L · 2.2 KB

│ │ │ ├─ 📝 deployment-checklist.md Markdown 38L · 1.8 KB

│ │ │ ├─ 📝 logging-schema.md Markdown 45L · 1.8 KB

│ │ │ └─ 📝 workflow-templates.md Markdown 39L · 2.1 KB

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 📋 relay-config.example.json JSON 65L · 1.5 KB

│ │ │ └─ 📋 relay-config.json JSON 66L · 1.7 KB

│ │ └─ 📝 SKILL.md Markdown 59L · 5.2 KB

│ ├─ ▾ 📁 feishu-calendar

│ │ ├─ 📝 Skill.md Markdown 101L · 2.7 KB

│ │ ├─ 📜 calendar-auth.ts TypeScript 43L · 1.3 KB

│ │ └─ 🔧 feishu-calendar.sh Shell 299L · 9.7 KB

│ ├─ ▾ 📁 feishu-calendar-v2

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api.md Markdown 377L · 6.9 KB

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🔧 calendar.sh Shell 424L · 15.9 KB

│ │ │ └─ 🔧 oauth.sh Shell 309L · 9.3 KB

│ │ └─ 📝 SKILL.md Markdown 173L · 4.0 KB

│ ├─ ▾ 📁 find-skills

│ │ ├─ 📝 SKILL.md Markdown 133L · 4.5 KB

│ │ └─ 📋 _meta.json JSON 5L · 130 B

│ ├─ ▾ 📁 github

│ │ ├─ 📝 SKILL.md Markdown 47L · 1.1 KB

│ │ └─ 📋 _meta.json JSON 5L · 125 B

│ ├─ ▾ 📁 gog

│ │ ├─ 📝 SKILL.md Markdown 36L · 1.7 KB

│ │ └─ 📋 _meta.json JSON 5L · 122 B

│ ├─ ▾ 📁 hiic-industry-daily-report

│ │ ├─ ▾ 📁 config

│ │ │ ├─ ▾ 📁 defaults

│ │ │ │ ├─ 📋 industries.json JSON 259L · 7.7 KB

│ │ │ │ ├─ 📋 sources.json JSON 17L · 528 B

│ │ │ │ └─ 📋 topics.json JSON 31L · 830 B

│ │ │ └─ 📋 schema.json JSON 174L · 4.5 KB

│ │ ├─ ▾ 📁 references

│ │ │ ├─ ▾ 📁 industries

│ │ │ │ ├─ 📋 01-半导体与集成电路.json JSON 35L · 616 B

│ │ │ │ ├─ 📋 02-人工智能.json JSON 35L · 604 B

│ │ │ │ ├─ 📋 03-网络与通信.json JSON 35L · 594 B

│ │ │ │ ├─ 📋 04-超高清视频显示.json JSON 35L · 597 B

│ │ │ │ ├─ 📋 05-智能终端.json JSON 34L · 595 B

│ │ │ │ ├─ 📋 06-智能传感器.json JSON 34L · 598 B

│ │ │ │ ├─ 📋 07-软件与信息服务.json JSON 34L · 595 B

│ │ │ │ ├─ 📋 08-数字创意.json JSON 35L · 602 B

│ │ │ │ ├─ 📋 09-高端装备与仪器.json JSON 34L · 605 B

│ │ │ │ ├─ 📋 10-低空经济与空天.json JSON 35L · 601 B

│ │ │ │ ├─ 📋 11-机器人.json JSON 33L · 580 B

│ │ │ │ ├─ 📋 12-智能机器人.json JSON 33L · 591 B

│ │ │ │ ├─ 📋 13-现代时尚.json JSON 34L · 594 B

│ │ │ │ ├─ 📋 14-安全节能环保.json JSON 34L · 609 B

│ │ │ │ ├─ 📋 15-新能源.json JSON 35L · 580 B

│ │ │ │ ├─ 📋 16-智能网联汽车.json JSON 34L · 603 B

│ │ │ │ ├─ 📋 17-量子信息.json JSON 33L · 571 B

│ │ │ │ ├─ 📋 18-光载信息.json JSON 33L · 562 B

│ │ │ │ ├─ 📋 19-高性能材料.json JSON 34L · 588 B

│ │ │ │ ├─ 📋 20-前沿新材料.json JSON 33L · 574 B

│ │ │ │ ├─ 📋 21-海洋产业.json JSON 55L · 1.1 KB

│ │ │ │ ├─ 📋 22-深地深海.json JSON 33L · 571 B

│ │ │ │ ├─ 📋 23-生物医药.json JSON 34L · 588 B

│ │ │ │ ├─ 📋 24-高端医疗器械.json JSON 34L · 597 B

│ │ │ │ ├─ 📋 25-大健康.json JSON 34L · 585 B

│ │ │ │ ├─ 📋 26-生物制造.json JSON 33L · 571 B

│ │ │ │ ├─ 📋 27-脑科学与脑机工程.json JSON 33L · 580 B

│ │ │ │ ├─ 📋 28-细胞与基因.json JSON 34L · 584 B

│ │ │ │ ├─ 📋 custom-01-煤化工.json JSON 82L · 1.6 KB

│ │ │ │ └─ 📋 custom-02-石油.json JSON 73L · 1.5 KB

│ │ │ ├─ 📝 config-guide.md Markdown 422L · 8.3 KB

│ │ │ ├─ 📋 config-template.json JSON 40L · 981 B

│ │ │ ├─ 📝 cron-guide.md Markdown 198L · 4.1 KB

│ │ │ └─ 📝 quick-reference.md Markdown 214L · 5.5 KB

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 📜 config-loader.mjs JavaScript 141L · 4.1 KB

│ │ │ ├─ 📜 content-extractor.mjs JavaScript 262L · 6.4 KB

│ │ │ ├─ 📜 feishu-bitable-saver.mjs JavaScript 239L · 6.3 KB

│ │ │ ├─ 📋 feishu-config.json JSON 48L · 1.1 KB

│ │ │ ├─ 📜 generate-report.mjs JavaScript 991L · 29.4 KB

│ │ │ ├─ 🐍 hiic-tech-digest-bridge.py Python 168L · 6.2 KB

│ │ │ ├─ 📜 init-industries.mjs JavaScript 240L · 6.2 KB

│ │ │ ├─ 🔧 run-with-proxy.sh Shell 40L · 1.0 KB

│ │ │ ├─ 📜 save-to-bitable.mjs JavaScript 215L · 5.4 KB

│ │ │ ├─ 🐍 save-to-bitable.py Python 30L · 817 B

│ │ │ ├─ 🔧 schedule-push.sh Shell 102L · 2.5 KB

│ │ │ ├─ 📜 search-aggregator.mjs JavaScript 286L · 7.5 KB

│ │ │ ├─ 📜 subscription-manager.mjs JavaScript 311L · 8.9 KB

│ │ │ ├─ 📜 summarize-content.mjs JavaScript 145L · 3.5 KB

│ │ │ ├─ 📜 summary-utils.mjs JavaScript 82L · 2.0 KB

│ │ │ ├─ 📜 time-utils.mjs JavaScript 119L · 2.8 KB

│ │ │ ├─ 📜 update-industries.mjs JavaScript 281L · 7.8 KB

│ │ │ └─ 🐍 validate-config.py Python 180L · 5.5 KB

│ │ ├─ 📝 CHANGELOG.md Markdown 128L · 4.2 KB

│ │ ├─ 📝 GITHUB_PUSH_GUIDE.md Markdown 100L · 2.6 KB

│ │ ├─ 📝 README.md Markdown 109L · 2.9 KB

│ │ ├─ 📝 SKILL.md Markdown 446L · 10.9 KB

│ │ └─ 🔧 push-to-github.sh Shell 43L · 947 B

│ ├─ ▾ 📁 image-generate

│ │ ├─ ▾ 📁 scripts

│ │ │ └─ 🐍 image_generate.py Python 72L · 2.3 KB

│ │ └─ 📝 SKILL.md Markdown 32L · 830 B

│ ├─ ▾ 📁 instreet

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🔑 config.json ⚠ JSON 7L · 260 B

│ │ │ └─ 📜 heartbeat.mjs JavaScript 162L · 4.3 KB

│ │ ├─ 📝 SKILL.md Markdown 124L · 3.1 KB

│ │ └─ 🔑 config.json ⚠ JSON 8L · 315 B

│ ├─ ▾ 📁 memory-setup

│ │ ├─ 📝 SKILL.md Markdown 171L · 4.0 KB

│ │ └─ 📋 _meta.json JSON 5L · 131 B

│ ├─ ▾ 📁 proactive-agent

│ │ ├─ ▾ 📁 assets

│ │ │ ├─ 📝 AGENTS.md Markdown 155L · 3.8 KB

│ │ │ ├─ 📝 HEARTBEAT.md Markdown 128L · 2.9 KB

│ │ │ ├─ 📝 MEMORY.md Markdown 47L · 836 B

│ │ │ ├─ 📝 ONBOARDING.md Markdown 103L · 2.4 KB

│ │ │ ├─ 📝 SOUL.md Markdown 40L · 1.4 KB

│ │ │ ├─ 📝 TOOLS.md Markdown 55L · 1.0 KB

│ │ │ └─ 📝 USER.md Markdown 36L · 926 B

│ │ ├─ ▾ 📁 references

│ │ │ ├─ 📝 onboarding-flow.md Markdown 158L · 4.0 KB

│ │ │ └─ 📝 security-patterns.md Markdown 109L · 3.0 KB

│ │ ├─ ▾ 📁 scripts

│ │ │ └─ 🔧 security-audit.sh Shell 149L · 4.0 KB

│ │ ├─ 📝 SKILL-v2.3-backup.md Markdown 554L · 19.7 KB

│ │ ├─ 📝 SKILL-v3-draft.md Markdown 499L · 16.6 KB

│ │ ├─ 📝 SKILL.md Markdown 632L · 20.4 KB

│ │ └─ 📋 _meta.json JSON 5L · 134 B

│ ├─ ▾ 📁 proactive-agent.backup.20260311_152420

│ │ ├─ ▾ 📁 assets

│ │ │ ├─ 📝 AGENTS.md Markdown 155L · 3.8 KB

│ │ │ ├─ 📝 HEARTBEAT.md Markdown 128L · 2.9 KB

│ │ │ ├─ 📝 MEMORY.md Markdown 47L · 836 B

│ │ │ ├─ 📝 ONBOARDING.md Markdown 103L · 2.4 KB

│ │ │ ├─ 📝 SOUL.md Markdown 40L · 1.4 KB

│ │ │ ├─ 📝 TOOLS.md Markdown 55L · 1.0 KB

│ │ │ └─ 📝 USER.md Markdown 36L · 926 B

│ │ ├─ ▾ 📁 references

│ │ │ ├─ 📝 onboarding-flow.md Markdown 158L · 4.0 KB

│ │ │ └─ 📝 security-patterns.md Markdown 109L · 3.0 KB

│ │ ├─ ▾ 📁 scripts

│ │ │ └─ 🔧 security-audit.sh Shell 149L · 4.0 KB

│ │ ├─ 📝 SKILL-v2.3-backup.md Markdown 554L · 19.7 KB

│ │ ├─ 📝 SKILL-v3-draft.md Markdown 499L · 16.6 KB

│ │ ├─ 📝 SKILL.md Markdown 632L · 20.4 KB

│ │ └─ 📋 _meta.json JSON 5L · 134 B

│ ├─ ▾ 📁 self-improving-agent

│ │ ├─ ▾ 📁 assets

│ │ │ ├─ 📝 LEARNINGS.md Markdown 45L · 1.1 KB

│ │ │ └─ 📝 SKILL-TEMPLATE.md Markdown 177L · 3.3 KB

│ │ ├─ ▾ 📁 hooks

│ │ │ └─ ▾ 📁 openclaw

│ │ │ ├─ 📝 HOOK.md Markdown 23L · 589 B

│ │ │ ├─ 📜 handler.js JavaScript 56L · 1.6 KB

│ │ │ └─ 📜 handler.ts TypeScript 62L · 1.8 KB

│ │ ├─ ▾ 📁 references

│ │ │ ├─ 📝 examples.md Markdown 374L · 8.1 KB

│ │ │ ├─ 📝 hooks-setup.md Markdown 223L · 4.8 KB

│ │ │ └─ 📝 openclaw-integration.md Markdown 248L · 5.5 KB

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🔧 activator.sh Shell 20L · 680 B

│ │ │ ├─ 🔧 error-detector.sh Shell 55L · 1.3 KB

│ │ │ └─ 🔧 extract-skill.sh Shell 221L · 5.2 KB

│ │ ├─ 📝 SKILL.md Markdown 647L · 19.2 KB

│ │ └─ 📋 _meta.json JSON 5L · 139 B

│ ├─ ▾ 📁 self-improving-agent.backup.20260311_152420

│ │ ├─ ▾ 📁 assets

│ │ │ ├─ 📝 LEARNINGS.md Markdown 45L · 1.1 KB

│ │ │ └─ 📝 SKILL-TEMPLATE.md Markdown 177L · 3.3 KB

│ │ ├─ ▾ 📁 hooks

│ │ │ └─ ▾ 📁 openclaw

│ │ │ ├─ 📝 HOOK.md Markdown 23L · 589 B

│ │ │ ├─ 📜 handler.js JavaScript 56L · 1.6 KB

│ │ │ └─ 📜 handler.ts TypeScript 62L · 1.8 KB

│ │ ├─ ▾ 📁 references

│ │ │ ├─ 📝 examples.md Markdown 374L · 8.1 KB

│ │ │ ├─ 📝 hooks-setup.md Markdown 223L · 4.8 KB

│ │ │ └─ 📝 openclaw-integration.md Markdown 248L · 5.5 KB

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🔧 activator.sh Shell 20L · 680 B

│ │ │ ├─ 🔧 error-detector.sh Shell 55L · 1.3 KB

│ │ │ └─ 🔧 extract-skill.sh Shell 221L · 5.2 KB

│ │ ├─ 📝 SKILL.md Markdown 647L · 19.2 KB

│ │ └─ 📋 _meta.json JSON 5L · 140 B

│ ├─ ▾ 📁 skill-vetter

│ │ ├─ 📝 SKILL.md Markdown 138L · 4.5 KB

│ │ └─ 📋 _meta.json JSON 5L · 131 B

│ ├─ ▾ 📁 summarize

│ │ ├─ 📝 SKILL.md Markdown 49L · 1.4 KB

│ │ └─ 📋 _meta.json JSON 5L · 128 B

│ ├─ ▾ 📁 tavily-search

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 📜 extract.mjs JavaScript 59L · 1.3 KB

│ │ │ └─ 📜 search.mjs JavaScript 101L · 2.2 KB

│ │ ├─ 📝 SKILL.md Markdown 38L · 1.2 KB

│ │ └─ 📋 _meta.json JSON 5L · 132 B

│ ├─ ▾ 📁 tech-news-digest

│ │ ├─ ▾ 📁 config

│ │ │ ├─ ▾ 📁 defaults

│ │ │ │ ├─ 📋 sources.json JSON 1888L · 41.0 KB

│ │ │ │ └─ 📋 topics.json JSON 71L · 2.9 KB

│ │ │ └─ 📋 schema.json JSON 174L · 4.5 KB

│ │ ├─ ▾ 📁 references

│ │ │ ├─ ▾ 📁 templates

│ │ │ │ ├─ 📝 discord.md Markdown 89L · 3.0 KB

│ │ │ │ ├─ 📝 email.md Markdown 132L · 5.7 KB

│ │ │ │ └─ 📝 pdf.md Markdown 74L · 2.1 KB

│ │ │ └─ 📝 digest-prompt.md Markdown 150L · 7.5 KB

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 config_loader.py Python 220L · 8.3 KB

│ │ │ ├─ 🐍 enrich-articles.py Python 256L · 9.2 KB

│ │ │ ├─ 🐍 fetch-github.py Python 687L · 24.9 KB

│ │ │ ├─ 🐍 fetch-reddit.py Python 326L · 11.9 KB

│ │ │ ├─ 🐍 fetch-rss.py Python 560L · 19.4 KB

│ │ │ ├─ 🐍 fetch-twitter.py Python 917L · 35.9 KB

│ │ │ ├─ 🐍 fetch-web.py Python 729L · 26.2 KB

│ │ │ ├─ 🐍 generate-pdf.py Python 383L · 9.5 KB

│ │ │ ├─ 🐍 merge-sources.py Python 709L · 26.8 KB

│ │ │ ├─ 🐍 run-pipeline.py Python 279L · 10.7 KB

│ │ │ ├─ 🐍 sanitize-html.py Python 222L · 7.2 KB

│ │ │ ├─ 🐍 send-email.py Python 150L · 5.1 KB

│ │ │ ├─ 🐍 source-health.py Python 147L · 4.8 KB

│ │ │ ├─ 🐍 summarize-merged.py Python 102L · 3.4 KB

│ │ │ ├─ 🔧 test-pipeline.sh Shell 306L · 10.7 KB

│ │ │ └─ 🐍 validate-config.py Python 278L · 9.4 KB

│ │ ├─ ▾ 📁 tests

│ │ │ ├─ ▾ 📁 fixtures

│ │ │ │ ├─ 📋 github.json JSON 102L · 3.4 KB

│ │ │ │ ├─ 📋 merged.json JSON 373L · 12.8 KB

│ │ │ │ ├─ 📋 reddit.json JSON 177L · 6.0 KB

│ │ │ │ ├─ 📋 rss.json JSON 105L · 3.3 KB

│ │ │ │ ├─ 📋 twitter.json JSON 159L · 4.9 KB

│ │ │ │ └─ 📋 web.json JSON 105L · 4.0 KB

│ │ │ ├─ 🐍 test_config.py Python 128L · 4.5 KB

│ │ │ └─ 🐍 test_merge.py Python 290L · 11.0 KB

│ │ ├─ 📝 CHANGELOG.md Markdown 359L · 20.7 KB

│ │ ├─ 📝 CONTRIBUTING.md Markdown 54L · 2.2 KB

│ │ ├─ 📝 README.md Markdown 149L · 5.3 KB

│ │ ├─ 📝 README_CN.md Markdown 151L · 4.9 KB

│ │ ├─ 📝 SKILL.md Markdown 536L · 21.4 KB

│ │ ├─ 📋 _meta.json JSON 5L · 136 B

│ │ └─ 📄 requirements.txt Text 27L · 606 B

│ ├─ ▾ 📁 translate-cli

│ │ ├─ ▾ 📁 agents

│ │ │ └─ 📋 openai.yaml YAML 4L · 221 B

│ │ ├─ ▾ 📁 references

│ │ │ ├─ 📝 behavior-and-errors.md Markdown 79L · 2.8 KB

│ │ │ ├─ 📝 config-toml.md Markdown 117L · 2.8 KB

│ │ │ ├─ 📝 flags-and-subcommands.md Markdown 78L · 2.9 KB

│ │ │ ├─ 📝 presets-and-prompts.md Markdown 84L · 1.7 KB

│ │ │ ├─ 📝 providers-and-env.md Markdown 71L · 1.9 KB

│ │ │ └─ 📝 quickstart.md Markdown 177L · 3.6 KB

│ │ ├─ 📝 SKILL.md Markdown 40L · 2.2 KB

│ │ └─ 📋 _meta.json JSON 5L · 132 B

│ ├─ ▾ 📁 veadk-go-skills

│ │ ├─ ▾ 📁 common

│ │ │ ├─ 📝 agent.md Markdown 169L · 4.2 KB

│ │ │ ├─ 📝 callback.md Markdown 220L · 9.2 KB

│ │ │ ├─ 📝 knowledgebase.md Markdown 62L · 1.4 KB

│ │ │ └─ 📝 tools.md Markdown 125L · 3.1 KB

│ │ ├─ ▾ 📁 converter

│ │ │ └─ 📝 enio_rule.md Markdown 182L · 5.1 KB

│ │ └─ 📝 SKILL.md Markdown 41L · 1.4 KB

│ ├─ ▾ 📁 veadk-skills

│ │ ├─ ▾ 📁 references

│ │ │ ├─ ▾ 📁 common

│ │ │ │ ├─ 📝 agent.md Markdown 125L · 3.2 KB

│ │ │ │ ├─ 📝 knowledgebase.md Markdown 29L · 737 B

│ │ │ │ └─ 📝 tools.md Markdown 53L · 1.9 KB

│ │ │ ├─ ▾ 📁 converter

│ │ │ │ ├─ 📝 dify_rules.md Markdown 20L · 815 B

│ │ │ │ └─ 📝 langchain_rules.md Markdown 44L · 652 B

│ │ │ └─ ▾ 📁 generator

│ │ │ ├─ 📝 analyze.md Markdown 16L · 1.2 KB

│ │ │ ├─ 📝 coding.md Markdown 6L · 258 B

│ │ │ └─ 📝 refine_prompt.md Markdown 51L · 2.4 KB

│ │ ├─ ▾ 📁 scripts

│ │ │ └─ 🐍 save_file.py Python 45L · 970 B

│ │ └─ 📝 SKILL.md Markdown 57L · 1.8 KB

│ └─ ▾ 📁 video-generate

│ ├─ ▾ 📁 scripts

│ │ └─ 🐍 video_generate.py Python 150L · 5.2 KB

│ └─ 📝 SKILL.md Markdown 47L · 1.5 KB

├─ ▾ 📁 update-approval-guard

│ ├─ ▾ 📁 examples

│ │ ├─ 📄 approval-message.txt Text 1L · 19 B

│ │ ├─ 📋 cron-job.json JSON 18L · 976 B

│ │ └─ 📄 cron-message.txt Text 11L · 677 B

│ ├─ 📝 README.md Markdown 63L · 1.7 KB

│ ├─ 📝 SKILL.md Markdown 257L · 7.6 KB

│ ├─ 📋 package.json JSON 20L · 549 B

│ └─ 🔧 publish.sh Shell 120L · 3.2 KB

├─ 📝 AGENTS.md Markdown 268L · 10.5 KB

├─ 📝 HEARTBEAT.md Markdown 22L · 702 B

├─ 📝 IDENTITY.md Markdown 9L · 339 B

├─ 📝 README.md Markdown 63L · 1.7 KB

├─ 📝 SKILL.md Markdown 257L · 7.6 KB

├─ 📝 SOUL.md Markdown 82L · 2.8 KB

├─ 📝 TOOLS.md Markdown 40L · 860 B

├─ 📝 UPDATE-APPROVAL-GUARD-PUBLISH.md Markdown 109L · 2.5 KB

├─ 📝 USER.md Markdown 15L · 273 B

├─ 📋 instreet-config.json JSON 11L · 389 B

├─ 📝 instreet-integration.md Markdown 111L · 2.5 KB

├─ 📋 package.json JSON 20L · 549 B

├─ 📝 star-office-ui-integration.md Markdown 179L · 4.3 KB

└─ 📋 test-news-config.json JSON 43L · 781 B

Security positives

The update-approval-guard skill has a well-designed security architecture with explicit approval workflows and never applies updates automatically

skills/instreet/scripts/heartbeat.mjs implements proper rate-limit handling (429 responses with retry delays) showing thoughtful API usage

Proactive-agent skill includes detailed security hardening guidance including skill vetting and agent network warnings

No evidence of base64-encoded payloads, direct IP exfiltration, eval(atob(...)), or other classic obfuscated attack patterns

No evidence of credential harvesting combined with remote exfiltration — the InStreet key is used for its intended platform only

The heartbeat script properly sanitizes API key exposure through Authorization header (Bearer token pattern), not in URLs