Caveat verdict
evez-mesh-ops
This skill is a reference guide consolidating infrastructure operations (Docker, Git, SSH, systemd, etc.) for managing distributed AI gateway meshes; it contains documentation and best-practice commands but no exfiltration, remote code execution, or credential theft.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (8)
Accesses .ssh directory
commands.md · code · .ssh/
References sudo — requests elevated privileges
commands.md · code · sudo
Uses eval() — can execute arbitrary code
security.md · prose · downgraded · eval(
Accesses OpenClaw config/secrets directly
security.md · prose · downgraded · ~/.openclaw/.env
Uses exec() — may execute shell commands
security.md · prose · downgraded · exec (
References child_process — can spawn system processes
security.md · prose · downgraded · child_process
Accesses system credential store
security.md · prose · downgraded · keychain
Sets world-executable permissions
SKILL.md · prose · downgraded · chmod 700
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class D). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
No declared permissions — minimal attack surface.
Is this flag fair?
Thanks — recorded.