Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Regex Assistant

v1.0.0

AI-powered regular expression generation, explanation, testing, debugging, and cross-language conversion. Generate regex from natural language, explain compl...

0· 21·0 current·0 all-time
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the implementation: the scripts provide generate, explain, test, debug, and convert commands. Required binaries (python3, curl) are used by the scripts, and the declared primary credential (EVOLINK_API_KEY) is required for AI calls to api.evolink.ai. No unrelated env vars, binaries, or config paths are requested.
Instruction Scope
SKILL.md and scripts instruct the agent/user to send regex patterns and (for 'test') file contents to api.evolink.ai. The test command explicitly reads the target file (truncates to 8000 bytes) and posts it to the remote API. This behavior is coherent with the stated 'test' and 'debug' features, but it means arbitrary file contents can be transmitted to a third party — users should not use AI commands with sensitive files or secrets. The skill also creates temporary files for payloads and removes them via trap; response parsing assumes a specific JSON layout (blocks with type 'text'), which may produce errors if the API format differs, but this is an implementation detail rather than a security mismatch.
Install Mechanism
There is no remote download or extraction. An included npm/bin installer copies bundled skill-files into a local 'skills/<slug>' directory and updates a local .clawhub lockfile — standard local install behavior. No URLs or external archives are fetched during install.
Credentials
Only EVOLINK_API_KEY is required (with optional EVOLINK_MODEL). No unrelated credentials or broad environment access are requested. The primaryEnv matches the declared external service (api.evolink.ai).
Persistence & Privilege
The skill is not always-enabled and is user-invocable. Installer writes its own files and a local origin/lock entry (normal). It does not request system-wide config changes or credentials belonging to other skills. Temporary files for payloads are created and cleaned up; nothing in the package tries to persist credentials.
Assessment
This skill appears to be what it says: an Evolink-backed regex assistant. Before installing or using AI commands, be aware that any pattern plus test file content you submit will be transmitted to api.evolink.ai using your EVOLINK_API_KEY. Do not run the 'test' or 'debug' commands on files that contain secrets, credentials, personal data, or other sensitive information. If you must analyze sensitive data, limit usage to the local 'cheatsheet' command (which runs offline), or inspect and modify the scripts to remove network calls. Consider creating an API key with limited scope (if offered by Evolink) and review Evolink's privacy/data-retention policy. If you have concerns about payload handling, review the evolink_ai() implementation: it truncates test content to 8000 bytes, uses temporary files and attempts cleanup via trap, and sends data with x-api-key and an 'anthropic-version' header — confirm these match the Evolink API contract before relying on the tool in production.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Binspython3, curl
EnvEVOLINK_API_KEY
Primary envEVOLINK_API_KEY
latestvk97fshdvmhdnxxtky5x7svrkd9854057
21downloads
0stars
1versions
Updated 4h ago
v1.0.0
MIT-0

Regex Assistant

AI-powered regular expression generation, explanation, testing, debugging, and cross-language conversion from your terminal.

Powered by Evolink.ai

When to Use

  • User wants to generate a regex pattern from a plain language description
  • User asks to explain what a regex pattern does
  • User needs to test a regex against a file and find matches/edge cases
  • User has a regex that doesn't work and needs debugging
  • User needs to convert a regex between programming languages
  • User wants a quick reference for regex syntax

Quick Start

1. Set your EvoLink API key

export EVOLINK_API_KEY="your-key-here"

Get a free key: evolink.ai/signup

2. Generate a regex

bash scripts/regex.sh generate "match email addresses" --lang python

3. Explain a regex

bash scripts/regex.sh explain "(?<=@)[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}"

Capabilities

Local Commands (no API key needed)

CommandDescription
cheatsheetRegex syntax quick reference — characters, quantifiers, groups, flags, common patterns

AI Commands (require EVOLINK_API_KEY)

CommandDescription
generate "<desc>" [--lang <lang>]AI generate regex from natural language with usage examples
explain "<pattern>" [--lang <lang>]AI explain regex pattern component by component
test "<pattern>" <file>AI test regex against file content, find matches and edge cases
debug "<pattern>" "<input>" "<expected>"AI diagnose why a regex fails and provide a fix
convert "<pattern>" --from <lang> --to <lang>AI convert regex between programming languages

Supported Languages

python · javascript · go · java · rust · php · ruby · csharp · perl

Examples

Generate a regex for URLs

bash scripts/regex.sh generate "match HTTP and HTTPS URLs" --lang javascript

Explain a complex pattern

bash scripts/regex.sh explain "\b\d{1,3}(\.\d{1,3}){3}\b"

Test a regex against a log file

bash scripts/regex.sh test "\d{4}-\d{2}-\d{2}" server.log

Debug a failing regex

bash scripts/regex.sh debug "(\d+\.)+\d+" "192.168.1.1" "should match full IP but only matches partial"

Convert Python regex to Go

bash scripts/regex.sh convert "(?P<year>\d{4})-(?P<month>\d{2})" --from python --to go

Quick reference

bash scripts/regex.sh cheatsheet

Configuration

VariableDefaultRequiredDescription
EVOLINK_API_KEYYes (AI commands)Your EvoLink API key. Get one free
EVOLINK_MODELclaude-opus-4-6NoModel for AI analysis

Required binaries: python3, curl

Security

Data Transmission

AI commands send regex patterns and test content to api.evolink.ai for analysis by Claude. By setting EVOLINK_API_KEY and using these commands, you consent to this transmission. Data is not stored after the response is returned. The cheatsheet command runs entirely locally and never transmits data.

Network Access

  • api.evolink.ai — AI analysis (AI commands only)

Persistence & Privilege

Temporary files for API payloads are cleaned up automatically. No credentials or persistent data are stored.

Links

Comments

Loading comments...