The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides a command to download and execute a remote shell script from https://raw.githubusercontent.com/tencent-connect/openclaw-qqbot/main/scripts/upgrade-via-npm.sh by piping the output of curl directly into the bash interpreter.
This execution method is highly dangerous as it grants the remote script full execution privileges on the host system without prior inspection or validation of the script's content.
An automated security scan has confirmed this as an untrusted remote code execution pattern.
[COMMAND_EXECUTION]: The skill instructs the agent to perform local system operations by running shell commands in the terminal.
The provided command includes flags like -fsSL to suppress errors and follow redirects, which can be used to hide malicious activity during the script retrieval process.
The primary function of the skill is to facilitate software updates via external code, creating a significant attack surface for system-level modifications.

qqbot-upgrade