Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Paragon MLS VB Calc

v1.0.0

Compare amortized debt, extra payments, chunking/basic acceleration, and advanced velocity banking for a real estate deal. Use when deciding whether chunking...

0· 115·0 current·0 all-time
byEarl Co@earlvanze

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for earlvanze/paragon-mls-vb-calc.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Paragon MLS VB Calc" (earlvanze/paragon-mls-vb-calc) from ClawHub.
Skill page: https://clawhub.ai/earlvanze/paragon-mls-vb-calc
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: node
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install paragon-mls-vb-calc

ClawHub CLI

Package manager switcher

npx clawhub@latest install paragon-mls-vb-calc
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the tooling: it needs Node and runs a paragon-mls MCP to compute payoff strategies. However the MCP is referenced via an absolute path under /home/umbrel/.openclaw/workspace/... rather than being bundled or a remote release, which is atypical and fragile.
!
Instruction Scope
SKILL.md maps the MCP to run node against /home/umbrel/.openclaw/workspace/deal-analyst/paragon-mls-mcp/dist/index.js. That means the skill will execute code from a specific location in the user's filesystem outside the skill bundle. The instructions do not declare or justify accessing that path.
!
Install Mechanism
There is no platform install spec, but the included scripts/build.sh will cd into the same hard-coded workspace path and run npm install && npm run build. Running npm install pulls packages from the npm registry and executes author scripts, which can run arbitrary code on your machine if executed — this is a material install-time risk.
Credentials
The skill declares no environment variables or credentials (ok). However it implicitly requires read/execute access to the user's workspace path and to install Node packages there — access to that path is not declared and could expose unrelated files if the MCP code uses them.
Persistence & Privilege
The skill is not marked always:true and does not request persistent privileges. It appears to be user-invokable only.
What to consider before installing
This skill could be legitimate, but exercise caution before running it. Key concerns: (1) it points to and runs code from an absolute path in your home workspace (/home/umbrel/...), and (2) it includes a build script that runs npm install there (which downloads and may execute third-party code). Before installing or invoking: verify the MCP package origin; inspect /home/umbrel/.openclaw/workspace/deal-analyst/paragon-mls-mcp/dist/index.js and its package.json/package-lock to see exactly what code and dependencies will run; do not run npm install on untrusted code — instead run builds in an isolated VM/container; search the MCP code for network calls, file-access, or credential reads; and prefer a version of the MCP bundled with the skill or from a known release URL. If you cannot verify the source and contents, do not run the build or execution on a machine with sensitive data.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Binsnode
latestvk970rgaefm2m6gfznbp1qsymnh856gzw
115downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

Paragon MLS VB Calc

Use the paragon-mls.vb_calc MCP tool to compare debt payoff strategies for a deal.

This skill is for deciding whether standard amortization, extra payments, chunking/basic acceleration, or advanced velocity banking makes the most sense.

Typical use

  • compare plain amortization versus aggressive payoff strategies
  • test whether chunking actually improves the deal
  • estimate interest savings and payoff time before using a HELOC or VB workflow
  • pair with Four-Square outputs from the analyze-deal skill

Example

mcporter call paragon-mls.vb_calc debtBalance:350000 interestRate:0.05 loanTermYears:30 monthlyIncome:8000 monthlyExpenses:4878.875681 extraPayment:1000

Inputs

  • debtBalance
  • interestRate
  • loanTermYears
  • extraPayment
  • monthlyIncome
  • monthlyExpenses
  • helocRate
  • advancedRate
  • helocLimit
  • chunkMonths

Output shape

Returns a comparison table plus JSON for:

  • amortized debt
  • amortized debt with extra payments
  • debt with basic acceleration
  • advanced debt acceleration
  • savings versus baseline
  • a recommendation on whether chunking or advanced VB makes sense

Notes

  • This is a decision tool, not lending advice.
  • Use actual income and expense numbers from the target property or operator budget, otherwise the recommendation will be noisy.

Comments

Loading comments...