Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

LaunchFast Full Research Loop

v1.0.0

Complete Amazon FBA product research pipeline using the LaunchFast MCP. Runs product research, IP checks, supplier sourcing, and PPC keyword research in sequ...

0· 489·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the runtime instructions: it sequences LaunchFast MCP calls for product research, IP checks, supplier sourcing, and PPC keyword research and then produces an HTML report. It does not request unrelated binaries, environment variables, or file-system locations beyond a user-specified report path.
Instruction Scope
SKILL.md confines operations to invoking the four named mcp__launchfast__* tools, extracting results, and writing a standalone HTML report to a user-specified path. It does not instruct reading unrelated system files, environment variables, or sending data to third-party endpoints beyond those MCP calls. Note: it will write a file to the user's file system (default ~/Downloads) — the user should confirm the save path.
Install Mechanism
No install spec and no code files — lowest-risk form (instruction-only). Nothing will be downloaded or written by the skill itself beyond the report file the agent is instructed to create.
Credentials
The skill declares no required environment variables or credentials. The only dependencies are the four LaunchFast MCP tools named in the README, which is appropriate for the described functionality. (Platform-level MCP tool credentials or access controls are external to this skill.)
Persistence & Privilege
always is false and the skill does not request persistent system changes or modify other skills' configs. Autonomous invocation is allowed by default but is not combined with elevated privileges or broad credential access.
Assessment
This skill appears coherent and low-risk: it simply orchestrates four LaunchFast MCP tools and writes a standalone HTML report. Before installing or running it: (1) ensure you have access to the named LaunchFast MCP tools (the skill lists them as prerequisites); (2) confirm the report save path (default is ~/Downloads) so you know where files will be written; (3) be aware the report will reproduce LaunchFast's visual design and brand elements — ensure you have rights/permission if that's a concern; (4) understand that any data the MCP tools access is governed by your platform's MCP integrations (the skill itself asks for no secrets); and (5) if you want stricter controls, review platform logs for the invoked MCP calls or run the skill on a test account first.

Like a lobster shell, security has layers — review code before you run it.

amazonvk976x6d488h0pr6pdmbd2jjk5h81qg37fbavk976x6d488h0pr6pdmbd2jjk5h81qg37latestvk976x6d488h0pr6pdmbd2jjk5h81qg37launchfastvk976x6d488h0pr6pdmbd2jjk5h81qg37reportvk976x6d488h0pr6pdmbd2jjk5h81qg37researchvk976x6d488h0pr6pdmbd2jjk5h81qg37

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments