Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Chrome Extension Generator

v1.0.0

一键生成 Chrome 扩展程序模板,支持 Popup、Background Script、Content Script、Options 页面等多种类型。

0· 472·2 current·2 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name, description, SKILL.md, and the included shell script are coherent: all describe and implement a local generator for Chrome extension templates. There are no unrelated required binaries, env vars, or network endpoints.
Instruction Scope
SKILL.md tells the agent/user to run a local CLI to generate files. The included script only creates files (manifest, HTML/JS, README) in the chosen output directory and does not access network, secrets, or unrelated system files. Minor note: the script's CLI option parsing appears buggy (it references $6/$7 and a loop condition on $# which may cause some flags to be ignored) — this is a functional issue, not a security one.
Install Mechanism
No install spec; this is instruction-only plus a bundled shell script. Nothing is downloaded or executed from remote URLs and no archives are extracted, so install risk is low.
Credentials
The skill requests no environment variables, credentials, or config paths. The generated manifest defaults to minimal 'storage' permission only; no unexpected credentials are accessed or required.
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges or modify other skills or system-wide agent settings. It only writes files to the specified output directory.
Assessment
This skill appears to do exactly what it claims: generate a Chrome extension scaffold locally. Before running: (1) choose or inspect the output directory because the script will create files there; (2) review the generated manifest.json and other files before loading/publishing the extension (change permissions like tabs, cookies, webRequest only if needed); (3) be aware the script uses a placeholder icon and minimal permissions by default; (4) the CLI option parsing in the script may not behave as documented — test flags on a sample run. No network calls or secret access were found, so the primary risk is accidental overwriting of files in the output path or uploading unreviewed code to the Chrome Web Store.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📦 Clawdis
browservk976kj1cjdtaqk1wwf5padp8ax825pfychrome-extensionvk976kj1cjdtaqk1wwf5padp8ax825pfygeneratorvk976kj1cjdtaqk1wwf5padp8ax825pfylatestvk976kj1cjdtaqk1wwf5padp8ax825pfy
472downloads
0stars
1versions
Updated 8h ago
v1.0.0
MIT-0

Chrome Extension Generator

一键生成 Chrome 扩展程序模板,快速启动你的扩展开发。

功能

  • ⚡ 快速生成项目结构
  • 🎨 多种模板可选
  • 📝 完整的配置文件
  • 🧪 测试模板
  • 📖 生成 README
  • 🚀 支持 TypeScript

模板类型

模板说明
basic基础 Hello World
popup带 Popup 界面
options设置页面
content-script内容脚本
background后台脚本
full完整功能扩展

使用方法

生成扩展

# 基本用法
chrome-extension-generator "扩展名称" "描述"

# 指定模板
chrome-extension-generator "My Extension" "描述" --template popup

# 指定技术栈
chrome-extension-generator "扩展" "描述" --template full --stack typescript

选项

选项说明
--template, -t模板类型
--stack, -sJavaScript/TypeScript
--output, -o输出目录

输出结构

my-extension/
├── manifest.json
├── popup.html
├── popup.js
├── popup.css
├── background.js
├── content.js
├── options.html
├── options.js
├── icon.png
├── README.md
└── _locales/
    └── en/
        └── messages.json

示例

Popup 扩展

chrome-extension-generator "Focus Timer" "Pomodoro timer extension" --template popup

内容脚本扩展

chrome-extension-generator "Page Highlighter" "Highlight text on pages" --template content-script

完整扩展

chrome-extension-generator "All-in-One Tool" "Ultimate browser tool" --template full

manifest.json 示例

{
  "manifest_version": 3,
  "name": "My Extension",
  "version": "1.0.0",
  "description": "An amazing Chrome extension",
  "permissions": ["storage", "activeTab"],
  "action": {
    "default_popup": "popup.html"
  },
  "background": {
    "service_worker": "background.js"
  }
}

安装

# 无需依赖

开发流程

  1. 生成模板
  2. 修改 manifest.json
  3. 编写功能代码
  4. 本地加载扩展
  5. 测试并发布

发布到 Chrome Web Store

生成模板包含:

  • 发布检查清单
  • 上传截图模板
  • 商店描述模板

变现思路

  1. 付费模板 - 专业版模板
  2. 定制开发 - 为客户开发扩展
  3. 插件市场 - 建立扩展市场
  4. 广告收入 - 在扩展中展示广告
  5. 联盟营销 - 推广产品获取佣金

示例扩展

  • 广告拦截器
  • 密码管理器
  • 截图工具
  • 笔记工具
  • 社媒工具
  • 开发辅助工具

常用权限

权限说明
storage本地存储
activeTab当前标签页
tabs标签页管理
bookmarks书签管理
history历史记录
cookiesCookie 管理
webRequest网络请求

Comments

Loading comments...