Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Json Formatter Pro

v1.1.0

All-in-one JSON toolkit — format, validate, query, minify, and extract data from JSON. Built-in JMESPath query, JSONPath support, syntax highlighting. 适合API调...

1· 63·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for darbling/json-utility-tools.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Json Formatter Pro" (darbling/json-utility-tools) from ClawHub.
Skill page: https://clawhub.ai/darbling/json-utility-tools
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install json-utility-tools

ClawHub CLI

Package manager switcher

npx clawhub@latest install json-utility-tools
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The SKILL.md advertises full JMESPath/JSONPath support, syntax highlighting, and a CLI called json_tool.py; the bundle only contains scripts/json_formatter.py which implements a very small, custom query parser and no syntax highlighting or real JMESPath/JSONPath engine. The description overstates capabilities.
!
Instruction Scope
Runtime instructions reference json_tool.py and show examples (e.g., validate file.json) that do not match the provided script's name or its argument semantics. The script expects JSON text arguments, not filenames; following SKILL.md examples will produce errors. Instructions therefore are inconsistent and may cause unexpected failures.
Install Mechanism
No install spec or external downloads are declared; the skill is instruction-only with a bundled local Python script. No remote fetches or installers are present.
Credentials
The skill requests no environment variables, credentials, or config paths — consistent with a local JSON utility. There is no apparent attempt to access secrets or external services.
Persistence & Privilege
always is false and the skill does not request elevated persistence or modify other skills. It does not attempt to persist credentials or alter agent-wide settings.
What to consider before installing
This package is internally inconsistent: the documentation and examples refer to a tool named json_tool.py and advanced features (JMESPath/JSONPath, syntax highlighting), but the repository only includes scripts/json_formatter.py, which provides basic JSON operations and a very limited query implementation. Before installing or invoking it: 1) don't run it with sensitive inputs or credentials (it doesn't request them, but the behavior is mismatched), 2) inspect and test the provided script in a sandbox with non-sensitive sample JSON to confirm behavior, 3) if you need full JMESPath/JSONPath, use a known library (e.g., jmespath) or a vetted tool, and 4) ask the publisher for clarification or a corrected SKILL.md and matching executable name. The code contains minor bugs/limitations (query and diff implementations are simplistic and may error), so treat it as experimental rather than production-ready.

Like a lobster shell, security has layers — review code before you run it.

beautifyvk97dbk6fe2t4wbxrbt21ypc8s985m1yvformatvk97dbk6fe2t4wbxrbt21ypc8s985m1yvjsonvk97dbk6fe2t4wbxrbt21ypc8s985m1yvlatestvk97dbk6fe2t4wbxrbt21ypc8s985m1yvminifyvk97dbk6fe2t4wbxrbt21ypc8s985m1yvparservk97dbk6fe2t4wbxrbt21ypc8s985m1yvqueryvk97dbk6fe2t4wbxrbt21ypc8s985m1yvvalidatevk97dbk6fe2t4wbxrbt21ypc8s985m1yv
63downloads
1stars
4versions
Updated 18h ago
v1.1.0
MIT-0

JSON Utility Tools 🛠️

全能JSON工具集。

Features | 功能

  • 格式化:美化JSON输出
  • 验证:检查JSON语法正确性
  • 查询:支持JSONPath/JMESPath
  • 压缩:JSON压缩/解压缩
  • 提取:从JSON中提取特定字段

Usage | 使用

# 格式化
json_tool.py format '{"name":"test"}'

# 验证
json_tool.py validate file.json

# 查询
json_tool.py query '{"a":{"b":1}}' 'a.b'

免责声明:本工具仅供学习参考,不构成任何投资或商业建议。

Comments

Loading comments...