Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Cline

v1.0.0

Automation skill for Cline.

0· 374·1 current·1 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description claim 'Automation skill for Cline' and the SKILL.md require the local 'cline' command on PATH — this is proportionate and expected.
Instruction Scope
Instructions are narrowly scoped to running 'cline -y "<TASK>"' and do not request unrelated files or credentials. Caveat: the SKILL.md mandates the '-y' (auto-confirm) flag while also saying 'Ask before destructive commands' — this is an internal inconsistency because '-y' will auto-accept prompts and could permit destructive actions if tasks are mis-specified. Also, because the skill runs a local CLI, the actual surface (file/network access) depends on what that binary does; the skill itself does not request those accesses explicitly.
Install Mechanism
No install spec (instruction-only). Nothing will be downloaded or written by the skill itself.
Credentials
No environment variables, credentials, or config paths are requested — proportional to an instruction-only wrapper around a local CLI.
Persistence & Privilege
always is false and model invocation is allowed (default). This is normal for an invocable skill and the skill does not request elevated persistence or modification of other skills.
Assessment
This skill will run whatever your locally installed 'cline' binary does. Before installing: (1) ensure the 'cline' binary on your system is the legitimate tool you expect (check origin/signature), (2) be cautious because the skill uses '-y' which auto-confirms actions — avoid or remove '-y' for tasks that could modify files or systems, and (3) do not grant the agent broad autonomous authority to run destructive tasks; require explicit confirmation for any change-making operations or run the CLI in a sandboxed/test environment first.

Like a lobster shell, security has layers — review code before you run it.

latestvk979z7j276vhkz1knnv5b5nh6982815b
374downloads
0stars
1versions
Updated 7h ago
v1.0.0
MIT-0

name: cline description: > Run the local Cline CLI to plan/build/code and return the output. requirements:

  • command: cline description: Cline CLI must be installed and on PATH usage:
  • title: Run Cline headless command: cline -y "<TASK>" notes: | Use for coding, scaffolding, debugging, and multi-step plans. Keep prompts short and task-oriented. examples:
  • 'cline -y "Create hello.sh that prints date and uname -a."'
  • 'cline -y "Refactor this repo: add README and scripts folder."' safety:
  • Never paste secrets.
  • Ask before destructive commands.

Comments

Loading comments...