Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Account Weight Optimization

v1.0.0

Optimize platform account weight and authority by assessing health, analyzing factors, and providing strategies for compliance, growth, and recovery.

0· 54·1 current·1 all-time
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill promises account health/weight optimization and even a python CLI usage line, but the package contains no code and declares no required binaries or credentials. Calling out 'improves algorithm favorability' implies actions that would typically need account access or external APIs, which are not justified by the declared requirements.
!
Instruction Scope
SKILL.md only gives a high-level capability list and a single usage example invoking 'optimize.py' under the skill folder. There are no runtime instructions for how account data is obtained, what credentials are needed, or what network calls are made. The usage references a local script that is not present, leaving ambiguous what an agent should actually do.
Install Mechanism
There is no install spec and no files besides SKILL.md, so nothing is written to disk by the skill itself — this lowers supply-chain risk. However, the lack of code increases ambiguity about intended behavior.
!
Credentials
The skill requests no environment variables or credentials but its stated purpose (operating on platform accounts and altering 'weight' or distribution) would reasonably require access to account tokens, cookies, or platform APIs. The absence of any declared credentials is a mismatch and could mask later requests for sensitive data.
Persistence & Privilege
always is false and there are no config path modifications or persistent install steps declared. The skill does not request elevated persistence privileges in its metadata.
What to consider before installing
Do not install or enable this skill yet. Ask the publisher for the missing optimize.py and for a clear description of: data sources, exactly what credentials (if any) are needed, what network endpoints the tool contacts, and how it modifies accounts or content distribution. If you must test it, request the full source, review it yourself (or have a developer review), and run it in an isolated environment; never provide account passwords or tokens until you understand and verify the code and its compliance with the target platform's terms. If the author can't supply code provenance or explains why no credentials are needed despite claiming to alter account weight, treat it as untrustworthy.

Like a lobster shell, security has layers — review code before you run it.

latestvk970fmhpcm8etbeqpf3x9pn2j184ckbp
54downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

account-weight-optimization

Description

Optimize account weight and authority on platforms. Improves algorithm favorability and content distribution.

Location

skills/account-weight-optimization/

Capabilities

  • Account health assessment
  • Weight factor analysis
  • Optimization strategies
  • Algorithm compliance
  • Authority building
  • Recovery planning

Usage

python skills/account-weight-optimization/optimize.py --account "@username" --platform "douyin"

Output

  • Health score
  • Weight factors
  • Optimization plan
  • Recovery steps

Comments

Loading comments...