Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ppe

Personal protective equipment tracker. Use when json ppe tasks, csv ppe tasks, checking ppe status.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 20 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description align with the included script. The script implements add/list/search/remove/export/stats/config operations for PPE entries and stores them in a local data directory (PPE_DIR or ~/.ppe). There are no unrelated capabilities requested.
Instruction Scope
SKILL.md simply delegates to scripts/script.sh for commands. The script reads/writes only files under the configured data directory and the config file there; it does not access other system paths, environment variables (beyond optional PPE_DIR), or external endpoints.
Install Mechanism
There is no install spec and the repository includes a single bash script (scripts/script.sh). Nothing is downloaded or extracted from external URLs during runtime.
Credentials
No required environment variables or credentials are declared. The only environment use is an optional PPE_DIR to override the default data directory, which is appropriate for a local CLI tool.
Persistence & Privilege
always is false and the skill does not request permanent elevated presence. The script writes only to its own data directory and config file; it doesn't modify other skills or system-wide agent settings.
Assessment
This skill is a simple local CLI implemented in bash and appears to be what it claims. Before installing, note: (1) data is stored unencrypted by default under ~/.ppe (or PPE_DIR if set) — back up or move it if needed and avoid using on shared systems if entries are sensitive; (2) the script runs locally and makes no network calls; (3) you can inspect scripts/script.sh yourself (it's short and readable) before running; (4) the script uses simple line-based JSON parsing (fragile for complex values) and sed -i/grep behaviors that may differ on BSD/macOS vs Linux — test on your platform. If you want stronger isolation, run it in a container or inspect/modify the script to suit your policies.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk9765khnzf2d0cn1mynzj8a6518383at

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

ppe

Personal protective equipment tracker. Use when json ppe tasks, csv ppe tasks, checking ppe status.

Commands

status

scripts/script.sh status

Show current status

add

scripts/script.sh add

Add new entry

list

scripts/script.sh list

List all entries

search

scripts/script.sh search

Search entries

remove

scripts/script.sh remove

Remove entry by number

export

scripts/script.sh export

Export data to file

stats

scripts/script.sh stats

Show statistics

config

scripts/script.sh config

View or set config

help

scripts/script.sh help

version

scripts/script.sh version

Configuration

Use scripts/script.sh config <key> <value> to set preferences.

VariableDescription
PPE_DIRData directory (default: ~/.ppe/)

Powered by BytesAgain | bytesagain.com | hello@bytesagain.com

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…