Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

WhatsApp Forward

v1.0.0

Generate VCards, parse invite links, and create forwarding templates

0· 469·0 current·0 all-time
byMarcos Santos@marcosrippel
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (vCard generation, invite parsing, forwarding templates) align with the included script: forward.js implements vcard, multi-vcard, parse-invite, and template commands and nothing else.
Instruction Scope
SKILL.md only instructs running the provided Node script with explicit commands. The instructions do not ask the agent to read unrelated files, access environment variables, or transmit data externally.
Install Mechanism
No install spec (instruction-only). The included script is small, readable, and does not perform downloads or write to disk beyond normal execution. Low install risk.
Credentials
The skill declares no required environment variables, credentials, or config paths, which is proportional to its simple functionality.
Persistence & Privilege
always is false and the skill does not request persistent/system-wide changes. It simply runs a local script when invoked.
Assessment
This skill is a small local utility that runs a provided Node.js script to generate vCards, parse WhatsApp invite links, and show message templates. Before installing, ensure you are comfortable allowing the agent to run 'node' commands (Node.js must be available). The code contains no network calls or secret access, so it won't exfiltrate data or require credentials. If you want additional assurance, open scripts/forward.js yourself to review — it's short and human-readable.

Like a lobster shell, security has layers — review code before you run it.

contactsvk970ahy4j6cmatd5bhdk309yh581e37cforwardvk970ahy4j6cmatd5bhdk309yh581e37cinvitevk970ahy4j6cmatd5bhdk309yh581e37clatestvk970ahy4j6cmatd5bhdk309yh581e37cvcardvk970ahy4j6cmatd5bhdk309yh581e37cwhatsappvk970ahy4j6cmatd5bhdk309yh581e37c

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

WhatsApp Forward Skill

Utilities for contact sharing, message forwarding, and invite link parsing.

Usage

exec({ cmd: "node <skill_dir>/scripts/forward.js COMMAND [ARGS]" })

Commands

Generate VCard

exec({ cmd: "node <skill_dir>/scripts/forward.js vcard \"John Doe\" \"5511999999999\"" })

Generate Multiple VCards

exec({ cmd: "node <skill_dir>/scripts/forward.js multi-vcard '[{\"name\":\"John\",\"phone\":\"5511999999999\"}]'" })

Parse Group Invite Link

exec({ cmd: "node <skill_dir>/scripts/forward.js parse-invite \"https://chat.whatsapp.com/ABC123\"" })

Show Forwarding Templates

exec({ cmd: "node <skill_dir>/scripts/forward.js template" })

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…