Subsequently they’ve included the use of curl but also haven’t declared that either which means that it _could_ leak your key if you provide it one. That’s why it’s suspicious - virus total has flagged that you should probably review the skill.md
Subsequently they’ve included the use of curl but also haven’t declared that either which means that it _could_ leak your key if you provide it one. That’s why it’s suspicious - virus total has flagged that you should probably review the skill.md
VirusTotal is flagging the trello skill as suspucious because it Does NOT include an API key? Am i expected to share my keys if I want to upload a skill?
https://clawhub.ai/steipete/trello
"Requiring TRELLO_API_KEY and TRELLO_TOKEN is appropriate for Trello access, but the registry records no required env vars while SKILL.md documents them. This omission is problematic: the skill will need highly privileged credentials but the published metadata does not disclose that requirement. The SKILL.md also references 'jq' and uses curl, but these are not declared in the registry entry."
Can't you just read it?
- I click skills.
- The first one is WireGuard "... secure routing and key management".
- I'd download it, hook it to this bot running on my system.
- I'd ask the bot to store / manage super-secret keys that protect actual servers with user data and personal details and god knows what...
- The bot follows my commands by spelunking random snippets of markdown, running other programs on my computer, doing web searches, reading what it finds on the web and giving itself more commands to do...
I've only been in tech for like 20 years or so but I feel like either I'm missing something substantial or some kind of madness is happening to people.
Morally, no. Legally, yes.
Much like the illegalization of marijuana, I can both be against a law and understand that while breaking the law I may face consequences.
He seemed to know the consequences of not getting a permit, and decided it was worth it.
If it blocks traffic, legally it needs a permit. (Or is this just some/my municipality?)
No, that would be an incredibly narrow reading of the bill of rights. It's also not how Americans have ever interpreted their rights. Blocking commerce has a long history as a form of protest in the US. It was used in the revolutionary war, the great railroad strike, the pullman strike, the suffrage movement, civil rights, etc. A lot of ink has been spilled trying to draw lines around what "peaceable" means and when a blockage becomes unpeaceable, but it's universally acknowledged that the bar is somewhat higher than whatever local ordinances happen to decide on.Let's talk some more about the civil rights example though. MLK was famously arrested for his part in the Birmingham campaign for demonstrating without a permit. His response was to write his "Letter from a Birmingham Jail" [0], where the famous quote that "Conversely, one has a moral responsibility to disobey unjust laws" originates. He directly addresses this issue of permits later in the letter:
For instance, I have been arrested on a charge of parading without a permit. Now, there is nothing wrong in having an ordinance which requires a permit for a parade. But such an ordinance becomes unjust when it is used to maintain segregation and to deny citizens the First-Amendment privilege of peaceful assembly and protest.
[0] https://www.africa.upenn.edu/Articles_Gen/Letter_Birmingham....I agree it's against the spirit of what was written, but that's how I understand our current ruleset atleast
OP says “I taught LLM how to see” and this should mean the LLM (which is capable of being taught/learning) internalized how to. It did not, it was given a tool that does seeing and tells it what things are.
People are very interested in getting good local LLMs with vision integrated, and so they want to read about it. Next to nobody would click on the honest “I enabled an LLM to use a Google service to identify objects in images”, which is what OP actually did.
I'm under the impression I'm being hampered by a separation of 'brain' and 'eyes', as I have yet to find a reasoning + vision local model that fits on my Mac, and played with two instances of qwen (vision and reasoning) to try to solve, but no real breakthroughs yet. The requirements I've given myself are fully local models, and no reading data from the ROM that the human player cannot be aware of.
I was hoping OP was able to retro-fit vision onto blind models, not just offload it to a cloud model. It's still an interesting write-up, but I for sure got click-baited