Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Quantum Lab

Run the /home/bram/work/quantum_lab Python scripts and demos inside the existing venv ~/.venvs/qiskit. Use when asked (e.g., via Telegram/OpenClaw) to run quant_math_lab.py, qcqi_pure_math_playground.py, quantum_app.py subcommands, quantumapp.server, or notebooks under the repo.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 1.5k · 0 current installs · 0 all-time installs
byBram Dobbelaar@bramdo
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description state: run local quantum_lab scripts in an existing qiskit venv. The included SKILL.md and qexec.sh only reference a repo root and a venv path (both configurable) and explicit commands to run those scripts — this is coherent and proportional to the stated purpose.
Instruction Scope
Instructions keep operations inside the configured repo and venv and recommend using helper scripts. The SKILL.md also suggests running `pip install -r requirements.txt` inside the venv if dependencies are missing (which will pull packages from PyPI). The helper script execs whatever command is passed, so an agent running untrusted user-supplied subcommands could execute arbitrary Python code within the repo/venv context — expected for this type of skill but worth noting.
Install Mechanism
No install spec is present (instruction-only skill) and the only included executable is a small shell helper. Nothing is downloaded or extracted at install time.
Credentials
The skill does not request secrets or credentials. It exposes two optional environment overrides (QUANTUM_LAB_ROOT, VENV_PATH) which are filesystem path settings appropriate for locating the repo and virtualenv.
Persistence & Privilege
The skill is not forced-always; it is user-invocable and allows normal autonomous invocation. It does not modify other skills or request elevated/platform-wide privileges.
Assessment
This skill runs code from a local repository inside a local Python virtualenv. Before installing or invoking it: 1) Verify the repository contents (quantum_lab) are trustworthy — running these commands executes code on your machine. 2) Be cautious when allowing remote triggers (Telegram/OpenClaw): an attacker who can send commands could make the skill run arbitrary Python in your environment. 3) Note that running the suggested `pip install -r requirements.txt` will download packages from PyPI into the venv — review requirements first. 4) If you want extra safety, run the repo in an isolated environment (a separate, minimal venv or container) or audit the scripts in the repo before use.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.0
Download zip
latestvk972vehd6q9dtqcr8he7h4n0x180jr2z

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Quantum Lab

Overview

Run quantum_lab repo commands inside the preexisting qiskit venv. Prefer the helper scripts in scripts/ so the venv and repo root are always set.

Command List (full)

Use <SKILL_DIR> as the folder where this skill is installed (e.g., ~/clawd/skills/quantum-lab).

  • bash <SKILL_DIR>/scripts/qexec.sh python quant_math_lab.py
  • bash <SKILL_DIR>/scripts/qexec.sh python qcqi_pure_math_playground.py
  • bash <SKILL_DIR>/scripts/qexec.sh python quantum_app.py
  • bash <SKILL_DIR>/scripts/qexec.sh python quantum_app.py self-tests
  • bash <SKILL_DIR>/scripts/qexec.sh python quantum_app.py playground
  • bash <SKILL_DIR>/scripts/qexec.sh python quantum_app.py notebook notebooks/SomeNotebook.ipynb
  • bash <SKILL_DIR>/scripts/qexec.sh python -m quantumapp.server --host 127.0.0.1 --port 8000

Command List (short)

Use these for quick Telegram/OpenClaw commands. Both gl and ql are supported and equivalent.

  • bash <SKILL_DIR>/scripts/gl self-tests
  • bash <SKILL_DIR>/scripts/gl playground
  • bash <SKILL_DIR>/scripts/gl app
  • bash <SKILL_DIR>/scripts/gl lab-tests
  • bash <SKILL_DIR>/scripts/gl playground-direct
  • bash <SKILL_DIR>/scripts/gl notebook notebooks/SomeNotebook.ipynb
  • bash <SKILL_DIR>/scripts/gl web 8000

Shorthand Handling

If the user types gl ... or ql ... without a full path, always expand it to the full command:

  • gl <args>bash <SKILL_DIR>/scripts/gl <args>
  • ql <args>bash <SKILL_DIR>/scripts/ql <args>

Notes

  • Repo root default: $HOME/work/quantum_lab (override with QUANTUM_LAB_ROOT).
  • Venv default: ~/.venvs/qiskit (override with VENV_PATH).
  • If dependencies are missing: bash <SKILL_DIR>/scripts/qexec.sh pip install -r requirements.txt.

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…