ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

celebrity-hot-money-tag

v1.0.2

Analyzes famous Chinese traders (游资) from dragon-tiger lists, provides win rates, investment recommendations, and trading style analysis. Invoke when user ne...

⭐ 0· 275·1 current·1 all-time
by@bailaner
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The name/description promise live analysis of 龙虎榜 data and identification of trader seats. However, the skill is instruction-only and contains only a static list of trader profiles; it requests no data sources, APIs, or credentials. That mismatch means it cannot actually perform the advertised dynamic analysis or verify current win rates.
ℹ
Instruction Scope
SKILL.md provides prewritten trader profiles and follow‑trade recommendations but does not instruct the agent to fetch, validate, or update龙虎榜 data, nor to access any files or external endpoints. It also contains potentially sensitive real‑name assertions and explicit investment advice without provenance or disclaimers.
✓
Install Mechanism
No install spec and no code files — lowest installation risk. Nothing is downloaded or written to disk by the skill itself.
✓
Credentials
The skill requires no environment variables, credentials, or config paths. It does not ask for access to unrelated services or secrets.
✓
Persistence & Privilege
always is false and there is no request to modify other skills or system settings. The skill does not request permanent elevated presence.
What to consider before installing
This skill is essentially a static catalog of trader profiles and recommendations, not a live analysis tool. Before installing or relying on it: (1) don't treat its win‑rates or follow‑trade recommendations as up‑to‑date or authoritative — ask the publisher for data sources and update cadence; (2) be cautious about legal/financial risks of acting on investment advice and about the potential for incorrect identification of people (real‑name claims may be inaccurate); (3) prefer a skill that documents how it obtains and validates 龙虎榜 data (APIs, timestamps, or sources) if you need real‑time/accurate analysis.

Like a lobster shell, security has layers — review code before you run it.

latestvk972yzw6fg53m4hm3mb45eq5zx82scce

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments