Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Learning
v1.4.1生成定制化的学习项目 Skill（含 SKILL.md + references/），为用户的学习过程提供从规划到结项的 持续引导。触发场景：用户表达想学习某个主题（"我想学 X""入门 X""搞懂 X""弄明白 X" "研究一下 X""补一下 X""深入了解 X""teach me X""learn X"），或...
⭐ 1· 178·0 current·0 all-time
byBalancegogogo@balancegsr
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (generate a learning project Skill that manages planning, progress, notes, and summaries) aligns with its instructions and file operations. It legitimately needs to read/write project files, create directories, and detect an appropriate install prefix; no unrelated credentials, binaries, or external services are required.
Instruction Scope
Runtime instructions perform broad local filesystem operations: scanning the current workspace and the user's home for common agent-skill directories to determine install path, reading/writing files under the chosen project directory, creating module folders, and auto-saving notes and summaries. This scope is coherent for a file-backed 'memory' Creator, but it does involve reading directory listings outside the immediate project folder during installation-path detection—review and confirm the detected install path before accepting installation.
Install Mechanism
There is no install spec and no code downloads; the Creator is instruction-only and will generate files locally (or a ZIP). This is the lowest-risk install pattern—nothing is fetched or executed from external URLs.
Credentials
The skill requests no environment variables, credentials, or config paths. Its file and tool usage (write/bash and the templates referencing web_search) are proportionate to generating and maintaining on-disk project artifacts and optionally verifying external references.
Persistence & Privilege
The skill writes and persists project files into the user's workspace and will auto-save notes and summaries. always:false and not requesting elevation; autonomous invocation is allowed (platform default). The file-write behavior is appropriate for the purpose, but users should be aware the agent will create and update files and that the Creator scans workspace/home to choose an install prefix—confirm location and file contents when delivering/installing.
Assessment
This Creator is coherent with its stated purpose: it will (1) ask you 2–3 questions, (2) generate a SKILL.md plus references, and (3) create a project directory with plans, notes, module folders, and summaries. Before installing: review the generated SKILL.md and the list of files it will create; confirm the chosen install directory (the Creator scans the workspace and your home for candidate skill folders); be mindful not to put sensitive secrets into notes (they are stored as plain Markdown); if you prefer, choose ZIP delivery and inspect contents offline before installing. Also note two minor inconsistencies to be aware of: the Creator's top-level tools list (write, bash) differs from templates which include web_search (the generated Skill may request web_search access), and the internal generated_by version string is v1.4.0 while the registry lists v1.4.1—these are likely benign metadata mismatches but review generated metadata during preview. Overall this appears internally consistent and appropriate for the stated functionality.Like a lobster shell, security has layers — review code before you run it.
latestvk977cv4dkryqeh6tfbev347x3583w0xb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.