Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

book_writer

v1.0.0

Generates structured, argument-driven book manuscript sections using modular 800--1000 word conceptual units.

0· 314·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (book manuscript writer) matches the provided SKILL.md and reference material: the skill defines a constrained writing workflow, demands user outlines, and includes style/formatting references. There are no binaries, installs, or environment variables required that would be unrelated to writing.
Instruction Scope
The runtime instructions are detailed and focused on producing argument-driven 800–1000 word units. The SKILL.md does allow the agent to 'gather context' such as a user-specified directory of literature or supplied research materials — this is reasonable for a writing task but means the agent may be asked to read user-provided files. The skill does not instruct reading arbitrary system files or exfiltrating data to external endpoints.
Install Mechanism
No install spec and no code files — instruction-only. This is lowest-risk: nothing will be downloaded or written to disk by an install step.
Credentials
The skill declares no required env vars, credentials, or config paths. The instructions reference user-supplied materials (e.g., a directory of papers) but do not request secrets or unrelated service keys.
Persistence & Privilege
always is false and there is no indication the skill modifies other skills or requests permanent elevated presence. disable-model-invocation is false (the default) so the agent could invoke the skill autonomously; that is normal and not in itself a concern given the otherwise narrow scope.
Assessment
This instruction-only skill appears coherent for drafting argument-driven book chapters. Before using it: (1) Only provide literature/files you intend the agent to read — do not upload credentials, private keys, or unrelated sensitive documents. (2) Review any generated citations or quoted passages for accuracy and potential plagiarism — the skill can invent references or misattribute sources. (3) If you enable autonomous invocation for agents, be aware the agent could call the skill without a fresh prompt; restrict autonomous permissions if you don’t want that behavior. (4) If you need the manuscript in a specific language/register, supply clear examples and the required outline as the skill insists it will not proceed without one.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cr0k01dgx1jwnt3fhvw7ezd823j5q

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments