ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Gradient

v2.0.0

Generate CSS gradient code, preview gradient combinations, and build gradient palettes using bash and Python. Use when creating linear, radial, or conic grad...

⭐ 0· 100·0 current·0 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the provided files and instructions. The script generates gradients, previews, palettes, and exports CSS/Tailwind/SCSS, and stores records in ~/.gradient/data.jsonl — all consistent with the stated purpose. No unrelated resources (cloud credentials, external services) are requested.
✓
Instruction Scope
SKILL.md instructs use of the included bash script (bash scripts/script.sh ...) and documents local storage and export behavior. The runtime actions are scoped to local file operations (reading/writing ~/.gradient/data.jsonl and user-specified export/preview files). It does not instruct reading other system-wide config files or exfiltrating data to remote endpoints.
✓
Install Mechanism
No install spec is present (instruction-only skill with an included script). There are no downloads or package installs declared; the tool relies on Python 3 and Bash which are reasonable prerequisites for a script of this type.
✓
Credentials
The skill requests no environment variables or credentials. Its only persistent footprint is a data directory under the user's home (~/.gradient), which is reasonable for a local CLI utility. There are no requests for unrelated secrets or config paths.
✓
Persistence & Privilege
always is false and the skill does not declare any elevated or system-wide modifications. It writes only to its own data directory and to user-specified export/preview files. It does not modify other skills or agent configuration.
Assessment
This skill appears to be a self-contained, local CSS gradient generator that stores its data in ~/.gradient/data.jsonl and writes export/preview files you request. Before installing or running: (1) review the script if you want to confirm there are no edits you disagree with, (2) be aware it will create and write files under $HOME/.gradient, and (3) run it in a controlled environment if you prefer (e.g., a throwaway user account or container). No network calls or credential access are requested by the code or SKILL.md.

Like a lobster shell, security has layers — review code before you run it.

latestvk975spqqxm55nvzdaep35xq2nh834ydr

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments