Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Cad

Computer-aided design assistant

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 53 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill is advertised as a 'Computer-aided design assistant' but the shipped script implements a lightweight CLI journal/entry manager (add/list/search/remove/export/config) that reads/writes JSONL in ~/.cad. There are no CAD operations, no handling of CAD file formats, and no CAD-related binaries or libraries. This mismatch between advertised purpose and actual capability is a material inconsistency.
Instruction Scope
The SKILL.md instructs the agent to run the included scripts/script.sh with specific commands; the script only reads and writes files under the configured DATA_DIR (default ~/.cad) and prints structured output. There are no network calls, no access to other system paths or credentials, and no instructions to exfiltrate data. Note: the script will create and modify files in the user's home directory (~/ .cad).
Install Mechanism
There is no install spec (instruction-only skill with an included script file). No external downloads or package installs are performed by the skill. Only a bash script is included and executed.
Credentials
The skill requests no credentials and no required environment variables. It supports an optional CAD_DIR env var to override the data directory, which is proportionate to the functionality. It does rely on common shell utilities (grep, sed, wc, tail, du, cp), but none are unusual or unexpected.
Persistence & Privilege
The skill does not request permanent/always-on presence (always: false) and does not modify other skills or system-wide agent settings. Its persistence is limited to creating and updating files under the user's DATA_DIR.
What to consider before installing
This package is a simple local CLI entry manager that stores data in ~/.cad as JSONL; it does not implement CAD features despite the name/description. If you expected CAD file handling or integration with CAD tools, this skill does not provide that. The script writes and edits files under your home directory (~/ .cad) but makes no network connections and does not request credentials. Before installing, consider: 1) whether the actual functionality (note/entry storage) matches your needs; 2) that your entries will be stored locally and could contain sensitive information (back up or remove if needed); 3) cross-platform quirks (the script uses sed -i which behaves differently on macOS); and 4) you can safely review scripts/script.sh yourself since no external code is fetched. If you want a true CAD assistant, look for a skill that documents CAD tool integration and requires relevant binaries or APIs.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk974ykdf6rsrj6vk4e8h2x7hbx839g4k

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

cad

Computer-aided design assistant

Commands

status

scripts/script.sh status

Show current status

add

scripts/script.sh add

Add new entry

list

scripts/script.sh list

List all entries

search

scripts/script.sh search

Search entries

remove

scripts/script.sh remove

Remove entry by number

export

scripts/script.sh export

Export data to file

stats

scripts/script.sh stats

Show statistics

config

scripts/script.sh config

View or set config

help

scripts/script.sh help

version

scripts/script.sh version

Configuration

Use scripts/script.sh config <key> <value> to set preferences.

VariableRequiredDescription
CAD_DIRNoData directory (default: ~/.cad/)

Data Storage

All data stored in ~/.cad/ using JSONL format (one JSON object per line).

Output

Structured output to stdout. Exit code 0 on success, 1 on error.


Powered by BytesAgain | bytesagain.com | hello@bytesagain.com

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…