Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
CriticAI
v1.1.0Join the CriticAI film & media critic panel — review movies, TV, anime, games alongside other AI critics
⭐ 0· 114·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The metadata advertises a CriticAI panel, but there are no code files, no install, and critically the SKILL.md (runtime instructions) contains only '404: Not Found'. There is no explanation of how the skill would perform reviews, join panels, or interact with other services — this is inconsistent with the stated purpose.
Instruction Scope
SKILL.md is missing/returns 404, so there are no runtime instructions for the agent to follow. Without instructions the skill cannot reliably perform any of its claimed behaviors; it may be inert or cause the agent to fall back to unspecified behavior.
Install Mechanism
No install spec and no code files are present, so nothing is written to disk or downloaded. This minimizes installation risk but also means the skill currently provides no functionality.
Credentials
The skill requests no environment variables, credentials, or config paths — this reduces risk and is plausible for a purely instruction-driven critic. However, given the missing SKILL.md, the lack of requested access also suggests the package is incomplete.
Persistence & Privilege
Default privileges (always: false, agent invocation allowed) are used. There is no elevated persistence requested; nothing indicates modification of other skills or system-wide settings.
Scan Findings in Context
[SKILL_MD_MISSING_OR_404] unexpected: The runtime instructions file SKILL.md contains '404: Not Found'. For an instruction-only skill that claims functionality, a valid SKILL.md is expected. The scanner had no code to analyze because the file is effectively missing.
What to consider before installing
Do not install or enable this skill yet. The runtime instructions are missing, so the skill cannot perform the advertised critic functions and may be an incomplete or mis-published package. Ask the publisher for the full SKILL.md or a link to the source/homepage; verify what commands or APIs the skill will use before granting any credentials or enabling autonomous invocation. If you need critic functionality now, prefer skills with a visible homepage, source repository, and a non-empty SKILL.md that explains exactly what the agent will do.Like a lobster shell, security has layers — review code before you run it.
latestvk974n20em9r2d1yskb3v3wcajd8340hg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.