Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The skill description promises infant growth charts, vaccine reminders, childcare policy queries and early-education interactions, but the SKILL.md lists filtering options and return fields appropriate to K12/exam-prep (学习阶段: K12/考研, 题库, 错题本, 名师履历). This is a clear mismatch — capabilities and required resources for childcare (health data, reminders, calendar/SMS/email integrations) are not represented.
Instruction Scope
The instruction file contains only UI/response-field guidance for an education/course product and gives no runtime instructions for handling growth records, vaccine schedules, or contacting external services. It does not instruct reading system files or env vars, but it also fails to define how the core childcare features should operate — scope is inconsistent and under-specified.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so there is no disk-write or external-download risk in the package itself.
Credentials
The declared requirements list no env vars or credentials, yet the described features (vaccine reminders, record keeping, policy queries) normally require calendar/SMS/email credentials, storage or API keys and explicit privacy handling. The absence of any declared credentials or data-handling instructions is disproportionate and unexplained.
Persistence & Privilege
The skill does not request always:true and is not declared to modify system-wide settings; autonomous invocation is allowed (the platform default) but this does not combine with other privileges here.
What to consider before installing
Do not assume this skill will implement childcare features as described — the runtime instructions are for a generic education/exam-prep product and do not explain how growth records or vaccine reminders are stored or delivered. Before installing or using it, ask the author to: (1) provide correct SKILL.md that matches the childcare feature set and explains runtime behavior; (2) list required credentials (calendar/SMS/push/storage) and why each is needed; (3) explain how personal and health data are stored, retained, and protected; and (4) provide the source/homepage or a trusted publisher identity. Avoid providing any personal child health data, calendar access, or payment information until these questions are answered and the skill's source is verified.Like a lobster shell, security has layers — review code before you run it.
latestvk97fbxc69kxc9y9pkgp13jyjzh835190
License
MIT-0
Free to use, modify, and redistribute. No attribution required.