ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Science Sim Author

v0.1.3

Generate self-contained interactive science simulations as a single index.html from a SimSpec YAML or JSON. Use when the user asks for physics, chemistry, bi...

⭐ 0· 385·0 current·0 all-time
byDimitris Gousopoulos@dimgouso
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name and description match the actual artifacts: schema, examples, templates, rubrics, and an agent prompt are all geared toward producing a single-file index.html simulation. The skill requests no binaries, credentials, or config paths, which is appropriate for an offline generator.
✓
Instruction Scope
SKILL.md gives a tight, prescriptive runtime workflow: validate the SimSpec against the included JSON schema, normalize fields, populate the provided HTML template, and run the included checklists/rubrics. It explicitly forbids remote fetches, asking for secrets, shell commands, telemetry, eval/Function, and multiple files. The instructions reference only bundled files and the SimSpec input, no unrelated system files or secrets.
✓
Install Mechanism
There is no install specification — this is an instruction-only skill with templates and rubrics in-repo. That minimizes disk/write/remote-install risk. No downloads, package managers, or external install URLs are requested.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. The scope of required data (a SimSpec YAML/JSON) aligns with the stated purpose. Nothing asks for unrelated secrets or multi-service credentials.
✓
Persistence & Privilege
Flags are default (always: false, agent invocation permitted). The skill does not request permanent presence or system-wide configuration changes. There is no indication it would modify other skills or agent settings.
Assessment
This skill appears internally consistent and designed to generate offline, single-file simulations. Before trusting a generated index.html: open it in a text editor to confirm there are no network/fetch calls, no usage of eval/Function, and no unexpected embedded endpoints; run it locally in a browser (double-click) and verify exports (JSON/CSV) operate client-side. If you plan to deploy or share generated files widely, skim the final JS for any unexpected behavior (the provided template enforces good rules, but the runtime script in the bundle was truncated in the review copy, so a quick manual check adds assurance).

Like a lobster shell, security has layers — review code before you run it.

canvasvk976g1vcw0sc21fdd5c1h2mcvn823heqcircuitsvk976g1vcw0sc21fdd5c1h2mcvn823heqclassroomvk976g1vcw0sc21fdd5c1h2mcvn823heqeducationvk976g1vcw0sc21fdd5c1h2mcvn823heqinteractivevk976g1vcw0sc21fdd5c1h2mcvn823heqlatestvk976g1vcw0sc21fdd5c1h2mcvn823heqmechanicsvk976g1vcw0sc21fdd5c1h2mcvn823heqphysicsvk976g1vcw0sc21fdd5c1h2mcvn823heqsciencevk976g1vcw0sc21fdd5c1h2mcvn823heqsimulationvk976g1vcw0sc21fdd5c1h2mcvn823heqstemvk976g1vcw0sc21fdd5c1h2mcvn823heq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧪 Clawdis
OSmacOS · Linux · Windows

Comments