Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

paper-checking

v0.1.0

论文查重系统 - 一亿字次级论文库秒级查重,支持纵向查重和横向查重

0· 40·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (论文查重) match the files and runtime instructions: the skill is an installer/usage guide for a Windows executable (paper_checking.exe). Required binaries and Windows/.NET/Visual Studio requirements are proportionate to the stated purpose.
Instruction Scope
SKILL.md and guides restrict actions to installing, compiling, configuring, running paper_checking.exe, managing a local comparison library, and reading local result files. Referenced commands and paths (git clone, systeminfo, %TEMP%, D:\比对库) are consistent with an on‑machine Windows workflow and do not instruct broad unrelated data collection or exfiltration.
Install Mechanism
This is instruction-only (no install spec). Guides tell users to compile with Visual Studio or download precompiled releases from GitHub. That is reasonable, but downloading and running precompiled Windows executables carries inherent risk—the skill does not provide signed checksums or verified release provenance.
Credentials
The skill does not declare or require any credentials, tokens, or environment variables. The only required artifact is a local executable (paper_checking.exe) and normal Windows components. One minor oddity: metadata.primaryEnv is set to 'windows' (misused field) but this does not request secrets.
Persistence & Privilege
always is false and the skill does not request permanent platform privileges. It does reference local progress storage (%TEMP%\paper_checking_progress.dat) which is normal for resuming long-running work and is within scope.
Assessment
This skill is internally consistent with a Windows paper‑checking application, but exercise normal caution before running third‑party executables: prefer to build from the repository source in a controlled environment (VM or sandbox) rather than running an unsigned release; verify the GitHub repo and release notes, look for checksums or signatures, scan downloaded binaries with antivirus, and review repository source code if you plan to add many private documents to the comparison library (these files will be stored locally by the tool). Note the SKILL metadata misuses primaryEnv='windows' (harmless but sloppy). If you need further assurance, ask the publisher for signed releases or run the tool in an isolated VM and inspect network activity while it runs.

Like a lobster shell, security has layers — review code before you run it.

documentvk97djab8vqqhcgc9tffmxhqcvs84ma7teducationvk97djab8vqqhcgc9tffmxhqcvs84ma7tlatestvk97djab8vqqhcgc9tffmxhqcvs84ma7tplagiarismvk97djab8vqqhcgc9tffmxhqcvs84ma7t

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📝 Clawdis
Binspaper_checking.exe

Comments