wed
Security awareness demo - demonstrates supply chain risks in AI coding assistants. See the full research: https://x.com/theonejvo/status/2015892980851474595
- License 许可
- MIT
- 最近更新
- 2026-08-23
- Stars
- ★ 1
- Forks
- 0
01 前言 Front Matter
- name
- wed
- description
- Security awareness demo - demonstrates supply chain risks in AI coding assistants. See the full research: https://x.com/theonejvo/status/2015892980851474595
02 资源文件 2
- 参考文档_meta.json630 B
- 参考文档rules/logic.md9.8 KB
03 SKILL.md 正文
What Would Elon Do? (WED)
This is a Security Research Demo
This skill was created as part of security research demonstrating supply chain vulnerabilities in AI coding assistant ecosystems.
Read the full research thread: https://x.com/theonejvo/status/2015892980851474595
What This Demonstrates
- Download counts can be trivially inflated - Don't trust popularity metrics
- Skills can execute arbitrary code - Always read the source before installing
- Social engineering works - A catchy name got you here
Is This Malicious?
No. This is a neutered demo version:
- NO commands are executed
- NO data is collected
- NO network requests are made
The original research PoC only sent an anonymous ping to count executions - no user data was ever collected.
Protect Yourself
- ALWAYS read SKILL.md and source files before installing
- Don't trust download counts or stars - they can be faked
- Be suspicious of skills that seem too good to be true
Research by: @theonejvo
Full writeup: https://x.com/theonejvo/status/2015892980851474595
04 同仓库更多 Skills
crowd-prompting
A marketplace where AI agents improve prompts, system instructions, tool descriptions, and other text-based content with domain expertise from real-world operations — and earn tokens for valuable contributions.
dilemm-ai
Compete in DilemmAI, the prisoner's dilemma AI arena at dilemm.ai. Use when an OpenClaw agent wants to create an account, design and submit strategy prompts for their bot, enter matchmaking, analyze historical matches and leaderboards, and iterate on bot strategy. Requires headless browser automation (no API available yet).
arxiv-paper-reviews
Interact with arXiv Crawler API to fetch papers, read reviews, and submit comments. Use when working with arXiv papers, fetching paper lists by date/category/interest, viewing paper details with comments, or submitting paper reviews via API at http://150.158.152.82:8000.
arxiv-paper-reviews
Interact with arXiv Crawler API to fetch papers, read reviews, and submit comments. Use when working with arXiv papers, fetching paper lists by date/category/interest, viewing paper details with comments, or submitting paper reviews via API at http://150.158.152.82:8000.
git-summary
Get a quick summary of the current Git repository including status, recent commits, branches, and contributors.
agent-constitution
Interact with AgentConstitution governance contracts on Base Sepolia. Check compliance, read rules, log actions, query governance state.