Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Disk

Disk - command-line tool for everyday use

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 45 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's name/description (a local command-line disk/monitor utility) matches the behavior in scripts/script.sh: the script creates ~/.local/share/disk, writes and reads local log files, and supports stats/export/search. No unexpected services or cloud credentials are requested.
!
Instruction Scope
SKILL.md claims configuration via DISK_DIR and shows a different, shorter set of commands (help, run, status, list, add, export), but the actual script implements many other commands (scan, monitor, report, alert, top, cleanup, backup, restore, etc.) and does not read DISK_DIR — it hardcodes DATA_DIR="${HOME}/.local/share/disk". There are also small format mismatches (e.g., _log format vs. other code expecting pipe-delimited timestamps). These inconsistencies could confuse users and cause data to be written to an unexpected path.
Install Mechanism
No install spec is provided; this is an instruction-only skill plus a bash script. That minimizes install-supply-chain risk. The shipped code is a plain shell script (no archives or remote downloads were shown).
Credentials
The skill declares no required environment variables or credentials (which matches the script as shown). However SKILL.md advertises a DISK_DIR env var to change the data directory but the script ignores it — a functional mismatch rather than an overreaching permission request.
Persistence & Privilege
The skill is user-invocable and not always-enabled. It writes only to a per-user data directory (~/.local/share/disk) and does not request elevation or modify other skills/config. No autonomous privileges were granted beyond the platform default.
What to consider before installing
What to consider before installing: - The visible script operates only on local files in ~/.local/share/disk, creating logs and exports; it does not request network credentials or external API keys in the provided content. - SKILL.md and the script disagree: SKILL.md says you can set DISK_DIR, but the script ignores that and always writes to ${HOME}/.local/share/disk. If you need the data elsewhere, inspect/modify the script first. - The SKILL.md command list differs from the script's commands; expect the script's actual behavior (scan, monitor, report, alert, etc.). - The provided script output in the prompt was truncated — the tail of scripts/script.sh was not included. You should review the entire script file locally before trusting or installing the skill to confirm there are no hidden network calls or exfiltration (e.g., curl, wget, nc, scp, or other remote upload commands) in the unshown portion. - If you accept it, consider running it in a sandboxed account or container and inspect ~/.local/share/disk after usage to confirm no unexpected data is written or transmitted. If you want, I can: (a) point out exact lines in the full script to change to honor DISK_DIR, or (b) re-evaluate if you provide the missing tail of scripts/script.sh.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.2
Download zip
latestvk9754gee3zf1gd6p8n96zk12pn83149s

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Disk

Disk monitor — usage stats, cleanup suggestions, partition info, and space alerts.

Commands

CommandDescription
disk helpShow usage info
disk runRun main task
disk statusCheck state
disk listList items
disk add <item>Add item
disk export <fmt>Export data

Usage

disk help
disk run
disk status

Examples

disk help
disk run
disk export json

Output

Results go to stdout. Save with disk run > output.txt.

Configuration

Set DISK_DIR to change data directory. Default: ~/.local/share/disk/


Powered by BytesAgain | bytesagain.com Feedback & Feature Requests: https://bytesagain.com/feedback

Features

  • Simple command-line interface for quick access
  • Local data storage with JSON/CSV export
  • History tracking and activity logs
  • Search across all entries
  • Status monitoring and health checks
  • No external dependencies required

Quick Start

# Check status
disk status

# View help and available commands
disk help

# View statistics
disk stats

# Export your data
disk export json

How It Works

Disk stores all data locally in ~/.local/share/disk/. Each command logs activity with timestamps for full traceability. Use stats to see a summary, or export to back up your data in JSON, CSV, or plain text format.

Support

Powered by BytesAgain | bytesagain.com

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…