Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

File Launcher

v1.0.0

This skill allows the assistant to launch files and open them with their default applications.

0· 21·0 current·0 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (open/launch files) align with the instructions (use Invoke-Item). However, the instructions require a Windows PowerShell cmdlet (Invoke-Item) while the skill metadata lists no OS restriction — that's an inconsistency. Source/homepage are unknown which reduces traceability.
!
Instruction Scope
SKILL.md tells the agent to open any file Windows has a default program for and explicitly says "No need to wait for confirmation." It does not require explicit file-path validation, user confirmation, or limit to safe directories. This grants broad discretion to open arbitrary files (including executables) and could lead to unwanted program launches.
Install Mechanism
Instruction-only skill with no install spec or code files; nothing is written to disk by an installer. This is the lowest install risk.
Credentials
The skill declares no required env vars or credentials (appropriate), but implicitly depends on a Windows PowerShell environment being available. That dependency is not declared in metadata (OS restriction missing).
Persistence & Privilege
always is false and the skill is user-invocable; agent autonomous invocation is allowed (default). No elevated persistence is requested and the skill does not modify other skills or system-wide settings.
What to consider before installing
This skill intends to open files via Windows PowerShell (Invoke-Item) but doesn't declare it's Windows-only and provides no safeguards. Before installing: verify you will only use it on a Windows agent; prefer a version that declares OS compatibility; require explicit user confirmation before launching files; restrict launches to trusted directories or file types; and prefer skills with a known source/homepage so you can audit behavior. If you need cross-platform behavior, reject this skill or ask the author to add OS checks and explicit safeguards.

Like a lobster shell, security has layers — review code before you run it.

latestvk977bkkkvjfnw5zaaj82ne3b4d858w55
21downloads
0stars
1versions
Updated 5h ago
v1.0.0
MIT-0

File Launcher Skill

Description

This skill allows the assistant to launch files and open them with their default applications.

Usage

  • Ask the assistant to open a specific file
  • Request to play a media file
  • Ask to launch a program

Notes

  • The assistant will use Invoke-Item to open files
  • No need to wait for confirmation as Windows programs are UI-based
  • Opens any file for which Windows has a default player or program to manage it

Example Commands

  • "Open my playlist"
  • "Play the music file"
  • "Launch the document"
  • "Open the image"

Comments

Loading comments...