Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Nm Oracle Setup
v1.0.0Provision the oracle inference daemon with Python 3.11+ and onnxruntime via uv
⭐ 0· 30·1 current·1 all-time
by@athola
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The SKILL.md's steps implement the stated goal (create a Python 3.11+ venv and install onnxruntime via uv). However the registry metadata says there are no required binaries while the document explicitly lists 'uv must be installed' as a prerequisite, and the skill assumes a local plugins/oracle Python package is present even though no code files are included in the skill bundle.
Instruction Scope
Instructions run an inline Python command that imports and executes oracle.provision.provision_venv from plugins/oracle — this will execute arbitrary local code in that path and create a venv and install packages from the internet. The instructions do not ask to read unrelated system files or credentials, but they do give the agent discretion to run local module code; you should verify that oracle.provision is the expected, trusted code before running.
Install Mechanism
There is no install spec (instruction-only), which is low-risk from an installation perspective. The only external activity is package download during venv provisioning (internet access).
Credentials
The skill requests no environment variables or credentials. It does require network access for package downloads and expects uv and Python 3.11+, which are proportionate to provisioning a Python venv and installing onnxruntime.
Persistence & Privilege
The skill does not request persistent platform privileges (always is false). It will create a virtual environment on disk (normal for provisioning) but does not attempt to modify other skills or system-wide agent configuration.
What to consider before installing
This skill is an instruction-only helper that runs local Python code to create a virtualenv and install onnxruntime. Before running: 1) Ensure you have uv and Python 3.11+ installed (SKILL.md lists uv as required even though metadata did not). 2) Inspect the local plugins/oracle/oracle/provision.py (or the oracle.provision module) to confirm it performs only the expected venv and install steps — the provided command will execute that module’s code. 3) Run in an isolated workspace or container if you don’t fully trust the repository, since package downloads and arbitrary local code execution can alter your environment. 4) Be aware onnxruntime wheels are platform-specific (GPU vs CPU) and may be large. If you want to proceed, run the commands manually after inspection rather than allowing any automated system to run them unreviewed.Like a lobster shell, security has layers — review code before you run it.
latestvk97ac9rh6n99afkm6y1darj9d984vn46
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🦞 Clawdis