Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Sort

Sort - command-line tool for everyday use

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 39 · 0 current installs · 0 all-time installs
byBytesAgain2@ckchzh
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims to be a simple 'Sort' CLI for everyday use, with commands like `run`, `add`, `list` in SKILL.md, but the provided script's help and implementation use many different sysops-style commands (scan, monitor, report, alert, backup, restore, etc.). The SKILL.md header declares version 2.0.0 while registry metadata shows 1.0.2 — version mismatch. These inconsistencies mean the package may not be what its description claims.
!
Instruction Scope
SKILL.md instructs using a local data dir (SORT_DIR) and exporting data (consistent), but it references commands that are not present (e.g., `sort run`, `sort add`) while the script exposes a different set of commands. The SKILL.md mentions the SORT_DIR env var but the skill declares no required env vars. The script reads/writes only to ~/.local/share/sort (or $SORT_DIR if set) and does not show network calls in the visible portion, but the truncated script body was not fully shown — so scope may diverge further down.
Install Mechanism
No install spec (instruction-only) which is low risk, but the skill includes a shell script file that will be installed as part of the skill bundle. That script will create and write files under the user's home directory (~/.local/share/sort). There are no remote downloads or package installs in the provided files.
Credentials
The skill requests no credentials or special environment variables. It reads HOME and optionally respects SORT_DIR (documented), which is proportionate to a local CLI tool that stores data in the user's home directory.
Persistence & Privilege
always is false and the skill does not request system-level privileges. It creates a data directory under the user's home and appends logs there; this is expected behavior for a local CLI utility and does not modify other skills or system-wide agent settings.
What to consider before installing
This bundle appears to contain a benign local logging/export shell tool, but there are clear inconsistencies between the SKILL.md, registry metadata, and the actual script (mismatched commands and version numbers). Before installing or running, review the entire script (the provided listing was truncated) to confirm there are no network calls, credential access, or commands that can read arbitrary files. Run the tool in a sandbox or container first if possible. Be aware it will create and write files under ~/.local/share/sort (or SORT_DIR if set). If you expect a small 'sort' helper (add/list/run), this package may not be that tool — proceed only after verifying the author, the full script, and that the commands match your expectations.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.2
Download zip
latestvk976a947tn6h68zzyp8cd9cavs8309va

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Sort

Sort toolkit — sort files, lines, columns, custom ordering, and deduplication.

Commands

CommandDescription
sort helpShow usage info
sort runRun main task
sort statusCheck state
sort listList items
sort add <item>Add item
sort export <fmt>Export data

Usage

sort help
sort run
sort status

Examples

sort help
sort run
sort export json

Output

Results go to stdout. Save with sort run > output.txt.

Configuration

Set SORT_DIR to change data directory. Default: ~/.local/share/sort/


Powered by BytesAgain | bytesagain.com Feedback & Feature Requests: https://bytesagain.com/feedback

Features

  • Simple command-line interface for quick access
  • Local data storage with JSON/CSV export
  • History tracking and activity logs
  • Search across all entries
  • Status monitoring and health checks
  • No external dependencies required

Quick Start

# Check status
sort status

# View help and available commands
sort help

# View statistics
sort stats

# Export your data
sort export json

How It Works

Sort stores all data locally in ~/.local/share/sort/. Each command logs activity with timestamps for full traceability. Use stats to see a summary, or export to back up your data in JSON, CSV, or plain text format.

Support

Powered by BytesAgain | bytesagain.com

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…