1 matches found
OpenClaw: Reject symlinks in local skill packaging script
Vulnerability skills/skill-creator/scripts/packageskill.py a local helper script used when authors package skills previously followed symlinks while building .skill archives. If an author runs this script on a crafted local skill directory containing symlinks to files outside the skill root, the...
4.6CVSS5.8AI score0.00221EPSS
SaveExploits0References7Affected Software1
20