ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Briefing Diario

v1.0.0

Fornece um dashboard visual para informações do dia a dia como localização, clima, economia, previsão do tempo. Use sempre que o usuário pedir "briefing diár...

⭐ 0· 352·1 current·1 all-time
byAlisson@extalisson3
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (daily briefing/dashboard) align with the instructions: collect local time, weather/astronomy from Open-Meteo, currency quotes from AwesomeAPI, and holidays from date.nager.at. There are no unrelated dependencies or credentials requested.
ℹ
Instruction Scope
Runtime instructions stay within the stated purpose and reference only the listed public endpoints and local date formatting. One ambiguity: 'Identifique a cidade do Usuário (padrão: Belo Horizonte...)' does not specify HOW to determine location (ask the user, use profile metadata, etc.). The agent should not infer location by silent methods (e.g., IP geolocation) without user consent. Otherwise no instructions read system files or request unrelated data.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing will be written to disk or downloaded during installation. Low install risk.
✓
Credentials
No environment variables, credentials, or config paths are required. All external calls are to public, keyless endpoints; requested data (weather, rates, holidays) matches the resources used.
✓
Persistence & Privilege
Skill is user-invocable, not always-on, and does not request persistent system changes or modify other skills. It does not request elevated privileges.
Assessment
This skill appears coherent and low-risk, but consider: 1) How will the agent determine the user's city? Prefer prompting the user or using explicit profile data and obtain consent before auto-locating. 2) The skill calls public APIs (Open-Meteo, AwesomeAPI, date.nager.at); verify those endpoints meet your availability and privacy needs and check rate limits. 3) Confirm you want outputs in the required fixed ASCII template and Portuguese translations. 4) If you operate outside Brazil or different time zones, verify the TZ handling and default location are acceptable. If you need stricter privacy, avoid sending any precise location to external services.

Like a lobster shell, security has layers — review code before you run it.

latestvk97abq7thxtmc45d54fa20wjm581xxhg

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments