Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Followers

Followers - command-line tool for everyday use

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 50 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill description and SKILL.md advertise follower analytics, engagement rates, audience demographics, and follow/unfollow detection, which imply API integration and remote data collection. The included script is a local, manual logger that only writes/reads files under ~/.local/share/followers; there are no network calls, API keys, or analytics algorithms. This is an overclaim/mismatch between stated purpose and actual capability.
Instruction Scope
SKILL.md instructs the user to run CLI commands and store data under ~/.local/share/followers, which matches the script's behavior. The runtime instructions do not ask the agent to read system files or credentials beyond the user's home directory. Minor inconsistency: SKILL.md references commands like 'followers run' and higher-level analytics features that do not appear to be implemented by the script.
Install Mechanism
No install spec is present (instruction-only skill with an included shell script). That minimizes supply-chain risk since nothing is downloaded at install time. The provided script will be written to disk as part of the skill bundle but there is no external install/download.
Credentials
The skill requests no environment variables or credentials. It uses HOME to create and write to ~/.local/share/followers, which is appropriate for a local CLI. No secrets or unrelated env vars are required or accessed.
Persistence & Privilege
always is false and the skill does not request elevated privileges. Its only persistent footprint is the data directory in the user's home. It does not modify other skills or system-wide configuration.
What to consider before installing
This tool is a local logger that writes files to ~/.local/share/followers; it does not contact external services or request credentials. However, the documentation overstates capabilities (analytics, demographics, follow/unfollow detection) that the bundled script does not implement. Before installing or running: (1) review the full script yourself (it will append logs you type into the data directory), (2) avoid entering any sensitive tokens or passwords into its entries, (3) run it in a sandbox/container if you want to inspect runtime behavior, and (4) prefer packages with clear upstream/homepage and documented network behavior if you actually need social-media analytics. If you expect automated API-based analytics, this skill is not sufficient and may be misleading.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.2
Download zip
latestvk97710ztwzhy9a43zfnrkb4659831yfe

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Followers

Follower analytics — growth tracking, engagement rates, audience demographics, follow/unfollow detection, and trend analysis.

Commands

CommandDescription
followers runExecute main function
followers listList all items
followers add <item>Add new item
followers statusShow current status
followers export <format>Export data
followers helpShow help

Usage

# Show help
followers help

# Quick start
followers run

Examples

# Run with defaults
followers run

# Check status
followers status

# Export results
followers export json

How It Works

Tips

  • Run followers help for all commands
  • Data stored in ~/.local/share/followers/

Powered by BytesAgain | bytesagain.com Feedback & Feature Requests: https://bytesagain.com/feedback

Features

  • Simple command-line interface for quick access
  • Local data storage with JSON/CSV export
  • History tracking and activity logs
  • Search across all entries
  • Status monitoring and health checks
  • No external dependencies required

Quick Start

# Check status
followers status

# View help and available commands
followers help

# View statistics
followers stats

# Export your data
followers export json

How It Works

Followers stores all data locally in ~/.local/share/followers/. Each command logs activity with timestamps for full traceability. Use stats to see a summary, or export to back up your data in JSON, CSV, or plain text format.

Support

Powered by BytesAgain | bytesagain.com

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…