Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Adaptive Reasoning

v2.0.0

Automatically assess task complexity and adjust reasoning level. Triggers on every user message to evaluate whether extended thinking (reasoning mode) would...

0· 78·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name and description (dynamically adjust reasoning level) match the SKILL.md: it's an instruction-only pre-processing heuristic and requests no extra binaries, installs, or credentials.
!
Instruction Scope
The SKILL.md tells the agent to 'Do not ask. Just activate.' and to call a session_status tool or use '/reasoning on' before responding. It also requires appending icons to responses. The instructions reference an internal tool (session_status) that the skill does not declare and may have privileges; several decision-threshold fields contain corrupted/placeholder characters (�?) making the activation logic ambiguous. Silent activation (changing session state without explicit user consent) is scope creep and may be surprising.
Install Mechanism
Instruction-only skill with no install spec or code files — lowest install risk and nothing is written to disk.
Credentials
No environment variables, credentials, or config paths are requested — the skill does not ask for secrets or external service access.
Persistence & Privilege
always:false and no persistent installation requested (good). However, the skill explicitly instructs the agent to toggle session reasoning state autonomously. Combined with the platform's autonomous invocation, this could lead to repeated automatic changes to agent state; the skill does not document safety/consent semantics for that behavior.
What to consider before installing
This skill is coherent with its stated purpose but the runtime instructions raise concerns you should consider before enabling it: 1) The SKILL.md tells the agent to silently enable/disable an internal 'reasoning' mode by calling a session_status tool or '/reasoning' command — verify that such a tool exists in your agent environment and review what privileges that tool has. 2) Several decision-thresholds in the document are corrupted or missing (�? symbols); ask the author to clarify exact score boundaries and behavior so you know when deep thinking will be triggered. 3) Silent activation ("Do not ask. Just activate.") may change agent behavior without user consent; if you want explicit control, prefer a version that asks or is user-invocable only. 4) Test the skill in a non-production conversation first to confirm it only toggles reasoning state and does not cause other side effects. 5) If you rely on strict auditability or want users to opt-in, request the publisher add explicit consent/confirmation steps and repair the ambiguous thresholds.

Like a lobster shell, security has layers — review code before you run it.

latestvk9757yjsp6hh4pzwn86hg6tf8584wrsp

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments