Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Property Valuatio Skill

v2.0.0

Provides Canadian home sellers and buyers a data-driven property valuation and tailored pricing strategy based on local market trends and comparable sales.

0· 56·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name/description promise: data-driven valuations using comparable sales and local trends. Actual package: instruction-only prompts with no declared data sources, APIs, or credentials. The model would have to rely solely on user input and its internal training data, which is not equivalent to live comparable-sales data — the capability is overstated.
Instruction Scope
SKILL.md and prompt.txt only ask the user to enter property details and describe an algorithm (price-per-sqft, comps weighting). They do not instruct the agent to read files, env vars, or external endpoints, so runtime scope is limited — but also vague about where comparables/market-trend data come from.
Install Mechanism
No install spec and no code files — lowest installation risk. Nothing will be written to disk or downloaded by the skill itself.
Credentials
Requires no environment variables, credentials, or config paths. The lack of required credentials is consistent with an instruction-only skill, but inconsistent with the claim of live market data access.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request perpetual presence or elevated privileges.
What to consider before installing
This skill is instruction-only and does not include code, downloads, or declared access to live MLS/realtor databases — so it cannot actually fetch current comparable sales or market feeds by itself. If you use it, expect the outputs to be based on (a) the details you type in and (b) the model's general knowledge, not fresh local transaction data. Before installing or relying on results: 1) Don't submit sensitive personal documents or private data unless you know where an 'upgrade' link points and whether a third party will receive your info. 2) Verify how the 'full report' payment/upgrade is delivered — the SKILL.md has a placeholder link, which is a red flag for incomplete/unknown monetization. 3) If you need accurate, up-to-date comparable sales, prefer tools that explicitly integrate with verified data sources (MLS, Realtor.ca) and declare the required API keys. 4) Treat this as an advisory/opinion tool; confirm valuations with a professional appraisal or verified data before making financial decisions.

Like a lobster shell, security has layers — review code before you run it.

latestvk9761av7tntf54ewdgr1xpjmt183ggqm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments