Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Macbook optimizer

v1.0.1

MacBook system optimization, performance monitoring, and troubleshooting tools for macOS users.

4· 3.1k·13 current·13 all-time
byMaclaw@drg3nz0
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The name/description (MacBook optimization, monitoring, cleanup) matches the instructions: it uses macOS built-ins like system_profiler, top, ps, df, du, powermetrics, pmset, etc. No external credentials, binaries, or unrelated services are requested. The capability set is appropriate for the stated purpose.
Instruction Scope
SKILL.md instructs the agent to run many system utilities (process, disk, network, battery, thermal commands) and to open GUI apps. It also supports automated cleanups (rm of caches, duplicates, large files) — the file-removal actions are potentially destructive but are consistent with an optimizer. The instructions claim 'safe file removal (with confirmation)' but are otherwise broad; ensure the agent prompts you for explicit confirmation before any deletions or irreversible changes.
Install Mechanism
Instruction-only skill with no install spec and no code files. This is the lowest-risk install model — nothing is written to disk by an installer. All tooling relies on native macOS utilities.
Credentials
No environment variables, credentials, or external config paths are requested. The requested access (system tools and standard cache/Downloads/Library paths) is proportional to the stated functionality.
Persistence & Privilege
always is false and the skill does not request persistent system-wide configuration. The skill can be invoked by the agent (default), which is expected. There is no attempt to modify other skills or agent-wide settings in the provided instructions.
Assessment
This skill appears to do what it says: it inspects system state and can remove caches, large files, and tweak settings using built-in macOS tools. Before installing or using it: 1) verify the author/source (SKILL.md references a GitHub repo but the registry metadata showed no homepage — confirm the repository and review its contents). 2) Do not allow any automated 'clean' or 'fix' operation without first reviewing a human-readable list of proposed deletions/changes and confirming them. 3) Back up important data (Time Machine or other) before running cleanup or automated fixes. 4) Be aware the skill will query process lists, open file lists, and system info and may prompt you to open privacy/full-disk-access screens — this is normal for these tasks but you should grant permissions only if you trust the source. 5) If you want extra assurance, request the author/publisher to supply an explicit, minimal non-destructive 'preview' mode that lists actions it would take without performing deletions so you can review them.

Like a lobster shell, security has layers — review code before you run it.

latestvk975xe4455yap37af015tdst7h809811

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments