Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

HiFleet Claw

查询并展示船舶实时及历史位置,支持AIS报位、锚地和靠泊状态管理。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 21 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
SKILL.md describes a Ship Position feature that calls HiFleet's position API and parses AIS/location fields — this aligns with the skill name and description. However, the registry metadata lists no required credentials while the SKILL.md explicitly requires a 'usertoken' (HIFLEET_USER_TOKEN / HIFLEET_USERTOKEN). That mismatch is unexpected and weakens trust.
Instruction Scope
The instructions are narrowly scoped: validate MMSI input, ensure a token is present, and perform a GET to https://api.hifleet.com/position/position/get/token with mmsi+usertoken, then parse results. The document does reference environment variables and project config as token sources; it does not instruct reading unrelated files or exfiltrating arbitrary data.
Install Mechanism
This is an instruction-only skill with no install spec and no bundled code files — the lowest-risk install mechanism. There is no download or package installation step.
!
Credentials
The skill requires a HiFleet 'usertoken' to call the API (reasonable and proportionate), but the registry metadata does not declare this required environment variable or primary credential. That omission could be a packaging mistake or indicate incomplete disclosure about where/how the token will be read/stored.
Persistence & Privilege
The skill does not request always: true, does not include installation scripts, and has no code that would persist or modify other skills or system configuration. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.
What to consider before installing
The skill's behavior (calling HiFleet's position API) is consistent with its purpose, but the registry metadata fails to declare the required API token. Before installing, ask the publisher to: 1) explicitly declare required env vars (HIFLEET_USER_TOKEN / HIFLEET_USERTOKEN) in the registry metadata and primary credential fields; 2) document how the token is supplied and stored (environment variable vs platform secret store) and any retention; 3) confirm the api.hifleet.com endpoint is official and trustworthy. Do not provide high-privilege or unrelated credentials. If you must test, supply a limited-scope or read-only token and monitor network calls; prefer installing only after the developer fixes the metadata and provides a privacy/security note.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk97ca5b37caynbwexe0fs0nzad8305z3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

HiFleet Claw 技能清单 / HiFleet Claw Skills

本文档为 HiFleet Claw 应用提供的技能索引,支持中英双语。技能将按序在 ClawHub 上实现。 This document is the skill index for the HiFleet Claw application, in Chinese and English. Skills will be implemented one by one on ClawHub.


1. 船位 / Ship Position ✅ 已实现

中文英文
名称船位
NameShip Position
描述查询、展示与管理船舶实时或历史位置信息,支持 AIS 报位、锚位、靠泊等状态。
DescriptionQuery, display and manage real-time or historical vessel positions, including AIS reports, anchorage and berthing status.
触发词船位、位置、报位、在哪、轨迹、AIS 位置
Trigger termsship position, vessel position, location, AIS position, track, where is
实现ship-position/ — 获取(岸基+卫星+移动)最新位置,需配置 usertoken

2. 档案 / Archive (Vessel Profile)

中文英文
名称档案
NameArchive / Vessel Profile
描述船舶与公司档案的查询与管理,包括船籍、船型、建造年份、船东、管理公司等基础信息。
DescriptionQuery and manage vessel and company profiles: flag, type, build year, owner, manager and other basic information.
触发词档案、船舶信息、船籍、船型、船东、管理公司
Trigger termsarchive, vessel profile, ship info, flag, ship type, owner, manager

3. 港口 / Port

中文英文
名称港口
NamePort
描述港口信息查询,包括港口列表、泊位、锚地、港口设施、靠离泊计划与港口动态等。
DescriptionPort information: port list, berths, anchorages, facilities, berthing/unberthing plans and port updates.
触发词港口、泊位、锚地、靠港、离港、港口信息
Trigger termsport, berth, anchorage, port call, arrival, departure, port info

4. 性能 / Performance

中文英文
名称性能
NamePerformance
描述船舶航行与主机性能分析,如航速、油耗、主机负荷、能效指标(EEOI 等)及性能报告。
DescriptionVessel and main engine performance: speed, fuel consumption, engine load, EEOI and performance reports.
触发词性能、油耗、航速、主机、能效、EEOI
Trigger termsperformance, fuel consumption, speed, main engine, EEOI, efficiency

5. 航程 / Voyage

中文英文
名称航程
NameVoyage
描述航次与航程管理:航次创建、航程段、挂港顺序、预计到港/离港时间及航程统计。
DescriptionVoyage and leg management: create voyage, legs, port call sequence, ETA/ETD and voyage statistics.
触发词航程、航次、挂港、ETA、ETD、航程段
Trigger termsvoyage, voyage leg, port call, ETA, ETD, voyage segment

6. 航线 / Route

中文英文
名称航线
NameRoute
描述航线规划与查询:推荐航线、航路点、距离与航时估算、历史航线与航线对比。
DescriptionRoute planning and query: recommended routes, waypoints, distance and time estimates, historical routes and comparison.
触发词航线、航路、推荐航线、距离、航时、航路点
Trigger termsroute, shipping route, recommended route, distance, sailing time, waypoint

7. 租船 / Charter

中文英文
名称租船
NameCharter
描述租船业务支持:租约信息、租家、租金、租期、合同条款及租船市场相关查询。
DescriptionCharter support: charter party, charterer, hire, period, contract terms and charter market queries.
触发词租船、租约、租家、租金、租期、合同
Trigger termscharter, charter party, charterer, hire, period, contract

8. 航运 / Shipping

中文英文
名称航运
NameShipping
描述航运综合信息:运价、运力、市场动态、船舶买卖、航运新闻与行业数据。
DescriptionGeneral shipping: freight rates, tonnage, market updates, sale & purchase, shipping news and industry data.
触发词航运、运价、运力、市场、买卖、航运新闻
Trigger termsshipping, freight rate, tonnage, market, sale and purchase, shipping news

9. 气象海况 / Weather & Sea Conditions

中文英文
名称气象海况
NameWeather & Sea Conditions
描述海上气象与海况:风、浪、涌、能见度、台风/气旋路径及航行气象建议。
DescriptionMaritime weather and sea state: wind, wave, swell, visibility, typhoon/cyclone tracks and voyage weather advice.
触发词气象、海况、风、浪、台风、能见度
Trigger termsweather, sea conditions, wind, wave, typhoon, visibility

10. 船队 / Fleet

中文英文
名称船队
NameFleet
描述船队级视图与管理:多船监控、船队分布、船队统计、报警汇总及船队报表。
DescriptionFleet-level view and management: multi-vessel monitoring, fleet distribution, statistics, alerts and fleet reports.
触发词船队、多船、船队分布、船队统计、船队报表
Trigger termsfleet, multi-vessel, fleet distribution, fleet statistics, fleet report

11. AIS / AIS

中文英文
名称AIS
NameAIS (Automatic Identification System)
描述AIS 数据与解析:AIS 报文、船舶识别、动态/静态数据、AIS 轨迹回放与 AIS 数据导出。
DescriptionAIS data and parsing: AIS messages, vessel identification, dynamic/static data, track replay and AIS export.
触发词AIS、报文、MMSI、轨迹回放、AIS 数据
Trigger termsAIS, message, MMSI, track replay, AIS data

技能实现顺序建议 / Suggested Implementation Order

可按业务依赖与优先级依次实现,例如:

  1. 船位 / Ship Position — 基础位置能力
  2. AIS / AIS — 与船位强相关
  3. 档案 / Archive — 船舶与公司基础数据
  4. 港口 / Port — 靠离泊与港口上下文
  5. 航程 / Voyage — 航次与挂港
  6. 航线 / Route — 航线与航路
  7. 性能 / Performance — 基于航程与船位
  8. 气象海况 / Weather & Sea Conditions — 航行安全与规划
  9. 船队 / Fleet — 多船聚合
  10. 租船 / Charter — 商业与合同
  11. 航运 / Shipping — 市场与行业

可根据 ClawHub 与产品规划调整顺序。


文档信息 / Document Info

项目
应用 / ApplicationHiFleet Claw
目标平台 / TargetClawHub
语言 / Language中文、English
版本 / Version1.0

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…