Why this verdict
- suspicious: finding skill:skills/mcporter:skills/mcporter/SKILL.md:16:SUPPLY
- suspicious: finding skill:skills/mcporter:skills/mcporter/SKILL.md:8:SUPPLY
Security findings 2
Supply chain
mediumContextual riskmedium confidenceThe skill frontmatter directs the runtime to install the npm package `mcporter` with no version pin, so the code installed to satisfy the required `mcporter` binary can change silently between runs.
package: mcporter
vector:codevector:metadata
Counter-argument considered
The install directive names the package with no version or hash anywhere in the frontmatter, so the carve-out for pinned official-registry installs does not apply and the mutability the finding describes is accurate; the block openly declares the install but never establishes which code will be fetched.
Supply chain
mediumContextual risklow confidenceThe skill's frontmatter declares an automatic node install of the npm package `mcporter` with no version pin, so activating the skill can fetch mutable install-time code whose contents are not established by the artifact.
metadata.openclaw.install[0].package: mcporter
vector:metadata
Counter-argument considered
The decoded frontmatter shows the automatic node install naming package mcporter with only id/kind/bins/label fields and no version, so activation can fetch mutable registry code whose contents the artifact never establishes; the pinned official-registry carve-out does not cover an unpinned install.
Open questions 1
What the analysis could not settle from the code alone.
Whether the openclaw runtime automatically executes the frontmatter install spec (fetching the unpinned `mcporter` package) before skill use is not determinable from the artifact itself.
Supply chain
Refuted findings 1
Candidates the review stage examined and rejected, kept for transparency.
Code execution
criticalRefutedlow confidenceThe skill instructs the agent to execute an arbitrary workspace script (`bun run ./server.ts`) as an ad-hoc stdio MCP server and pass it a remote URL to scrape, running whatever file sits at that path when the documented command is issued.
mcporter call --stdio
Why it was refuted
Launching a local script as an ad-hoc stdio MCP server is the skill's explicitly declared core capability - the description names 'ad-hoc servers' and this exact line is recorded as declared exec claim D6 with no contradictions - so the declared-core-capability carve-out applies; the example URL is illustrative documentation of the wrapped CLI's own --stdio feature, not a concealed exec vector.
Coverage gaps 2
Parts of the artifact the static analysis could not fully examine.
context:unanalyzable_binary binary content is only byte-scanned
data/17monipdb.dat
skill_frontmatter_invalid missing name/description frontmatter
skills/canvas/SKILL.md
