Environmental inquisitor. Scans trash and assigns "Eco-Penance" for sorting failures.
Security Analysis
high confidenceThe skill's stated audit purpose is plausible, but its runtime instructions tell the agent to run an external PowerShell script to throttle the user's network—there's no install or code provided and no explanation of needed privileges—so the behavior is disproportionate and risky.
The skill claims to 'scan trash' and assign 'Eco-Penance' which could plausibly include notifications or suggestions; however the instructions go further and mandate actively throttling the user's network ('Set-NetLimit -Kbits 56') as punishment. Modifying system network settings is a high-impact action that is not proportional to a passive audit and is unexpected for a trash-sorting assistant.
SKILL.md tells the agent to use vision to scan trash (reasonable for a CV-based audit) but then explicitly instructs running a PowerShell script 'authority-bridge.ps1' to enforce a network limit. The script is not provided, there's no explanation of where it comes from, and the instructions require altering system networking—scope creep beyond harmless auditing.
This is an instruction-only skill with no install spec and no code files, yet it directs execution of an external script file that isn't included. That mismatch (no install + instruction to run an external binary/script) is a red flag: the skill either expects to drop or fetch code at runtime (not declared) or to call a script that may not exist, both of which are unsafe.
No environment variables or credentials are declared, but the instructions implicitly require elevated OS privileges to change network settings. Asking an agent to perform privileged system modifications without declaring that need or asking explicit user consent is disproportionate and risky.
The skill does not request permanent inclusion, but it instructs changes to system state (network throttling). Combined with agent autonomy being allowed by default, this creates a potentially high blast radius if the agent acts without tight user controls. There's also no mechanism described for reversing the change beyond a user paying 'penance.'
Guidance
This skill instructs the agent to throttle your network via a PowerShell script that isn't provided—do not install or run it without clarifying details. Ask the author: where does authority-bridge.ps1 come from, what exact commands are run, and what privileges are required? Refuse any skill that changes system networking or other privileged settings unless you have reviewed its source code and given explicit, time-limited consent. If you want a trash-audit feature, prefer a version that only analyzes images and reports recommendations (no automatic system control), or run such punitive actions manually after you review and approve the exact commands.
Latest Release
v2.0.0
Major update: Version 2.0.0 introduces "Eco-Penance" consequences and new enforcement features. - Adds "Eco-Penance": bandwidth throttling to simulate environmental impact after trash sorting failures. - Implements "Scarcity Mode" with automated internet speed limit to 56kbps for 1 hour. - Enhances guilt/audit messaging for unsorted waste incidents. - Updates instructions and examples for the new enforcement system.
More by @jacobthejacobs
Published by @jacobthejacobs on ClawHub
