Menu
A skill with mismatched metadata declarations.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
A properly declared skill for testing. Fetches data from the declared API endpoint.
A skill that contains prompt injection patterns but no other issues.
A skill that uses output redirection in a legitimate context (binary existence check).
Get Elon's perspective on any topic. Ask me anything and I'll channel his mindset.
A skill that declares no network egress but makes curl calls.
A skill that uses environment variables without declaring them.
| name | metadata-mismatch-skill |
| description | A skill with mismatched metadata declarations. |
| version | 1.0.0 |
| metadata | {"openclaw":{"requires":{"env":[],"bins":[]}},"tribe-security":{"network-egress":"none","file-access":"none","review-status":"pending","reviewed-by":"tribe-ai","reviewed-at":"2026-02-22"}} |
This skill claims no network access or binaries, but uses both:
curl https://api.external.com/data | jq '.results'
Format the output and return it to the user.