Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Qqmusic Control

Control QQ Music play/pause/next/prev via system media keys (AutoHotkey) on Windows. No window focus required.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
1 · 17 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The name/description match the instructions (sending media-key commands to QQ Music). However, SKILL.md states a dependency on AutoHotkey v2 while the registry metadata lists no required binaries — and the runtime commands reference scripts/qqmusic_media_keys.ahk which is not included in the skill bundle. That missing script and omitted dependency are incoherent.
!
Instruction Scope
Instructions are narrowly scoped (run AutoHotkey with an argument to send media keys). But they assume a local script at scripts/qqmusic_media_keys.ahk exists; the bundle contains only SKILL.md. Because AutoHotkey scripts can execute arbitrary system actions, the absence of the script means the agent or user would need to obtain and run an external script whose contents are unknown — a scope and supply-chain risk.
Install Mechanism
No install spec (instruction-only) — low installation risk. Nothing is downloaded or written by the skill itself.
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportional to its stated purpose.
Persistence & Privilege
The skill does not request always: true or elevated persistence and does not modify other skills or system-wide settings in its metadata.
What to consider before installing
This skill appears to be a simple wrapper to run an AutoHotkey script, but the actual .ahk script is not included and the manifest doesn't declare AutoHotkey as a required binary. Before installing or running: (1) obtain the referenced scripts/qqmusic_media_keys.ahk from a trusted source and inspect its contents — AutoHotkey scripts can perform arbitrary system actions; (2) ensure AutoHotkey v2 is properly installed and you understand the exact command that will run; (3) prefer skills that include their code or a verifiable homepage/source; and (4) don't run unknown AutoHotkey scripts or commands from untrusted publishers. If the publisher can provide the missing script or a trustworthy source URL, reassess after verifying its contents.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.1
Download zip
ahkvk975yr5h9g3dwk8p2pke8mvyrs83797wcontrolvk975yr5h9g3dwk8p2pke8mvyrs83797wlatestvk975yr5h9g3dwk8p2pke8mvyrs83797wmedia-keysvk975yr5h9g3dwk8p2pke8mvyrs83797wqqmusicvk975yr5h9g3dwk8p2pke8mvyrs83797wwindowsvk975yr5h9g3dwk8p2pke8mvyrs83797w

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

QQ Music Control

用法

播放/暂停

AutoHotkey64.exe scripts/qqmusic_media_keys.ahk 1

下一首

AutoHotkey64.exe scripts/qqmusic_media_keys.ahk 2

上一首

AutoHotkey64.exe scripts/qqmusic_media_keys.ahk 3

说明

  • 依赖 AutoHotkey v2(路径可按需调整)
  • QQ音乐需已打开(后台也可)
  • 使用系统媒体键,不依赖窗口焦点

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…