Skills from clawhub.ai/visionik

High-risk skill: executes arbitrary shell commands via `exec.Command("sh", "-c", c.Exec)`, allowing untrusted command execution on new-mail events. It stores and reads credentials in `~/.config/sog/config.json` and `~/.config/sog/credentials.json` (and `SOG_PASSWORD_*` env vars) and connects to mail/calendar/WebDAV servers.

`ecto` is a command-line tool to manage Ghost sites via the Admin API. It reads/writes `~/.config/ecto/config.json`, uses `GHOST_URL`, `GHOST_ADMIN_KEY`, `GHOST_SITE`, and makes network calls to configured Ghost endpoints; these behaviors are purpose-aligned and no obfuscation or secret exfiltration was found.

This skill documents a CLI (`ouracli`) for retrieving Oura Ring health data and gives usage examples and configuration. It instructs executing commands like `ouracli activity "7 days" --json` and loading `PERSONAL_ACCESS_TOKEN` from `secrets/oura.env` or `~/.secrets/oura.env`, which accesses `https://cloud.ouraring.com`.

This skill is a Microsoft 365 CLI (`mog`) that manages Mail, Calendar, Drive, Contacts, Tasks, Word, PowerPoint, Excel, and OneNote via Microsoft Graph. It makes network calls to `https://graph.microsoft.com/v1.0` and `https://login.microsoftonline.com/common/oauth2/v2.0`, stores OAuth tokens at `~/.config/mog/tokens.json` (and supports keyring), and includes build/run commands like `go build -o {{.BINARY}} ./cmd/mog`.