This is what? The 4th or 5th attempt at this in the past two weeks?
So let's recap:
- I click skills.
- The first one is WireGuard "... secure routing and key management".
- I'd download it, hook it to this bot running on my system.
- I'd ask the bot to store / manage super-secret keys that protect actual servers with user data and personal details and god knows what...
- The bot follows my commands by spelunking random snippets of markdown, running other programs on my computer, doing web searches, reading what it finds on the web and giving itself more commands to do...
I've only been in tech for like 20 years or so but I feel like either I'm missing something substantial or some kind of madness is happening to people.
Who is scanning these skills for malware? This seems like a prime target for malicious actors.
Do these skills actually provide much value? Like, how much better are they than something that I could tell Claude to generate based on a single API doc from Slack/Trello?
Does Openwork replace the need for openclaw? Seems like a more grown up version of it.
> Upload AgentSkills bundles, version them like npm, and make them searchable with vectors. No gatekeeping, just signal.
Sigh, when I read this and only understand "npm", I feel like retiring.
I have the clawhub skill disabled. You really shouldnt use it, especially when you can just have your claw create their own skills as needed.
How could a public repository of unverified skills that can be downloaded by casual users for a software tool that allows for un-gated access to private information, including financial information, possibly go wrong?
"Don't worry, we have stars."
Itchy and Scratchy land is open for business.
So I click on "Skills" and it feels like the page cannot decide what to show me, every item on the list shifts and moves, how is anyone supposed to click on something if it disappears?