Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Flowchart Exam Generator
v1.0.0根据流程图图片自动生成应知应会考试题（单选题、多选题）。当用户要求"根据流程图出考试题"、"根据流程图生成题目"、"根据流程图出应知应会"时使用。
⭐ 0· 63·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description (generate exam questions from flowchart images) matches the included code and instructions. However, the bundled Python script uses the openpyxl library but the skill declares no install requirements or required binaries, which is an inconsistency: either the runtime must already provide Python and openpyxl, or an install step is missing.
Instruction Scope
SKILL.md stays within scope (analyze a flowchart image and produce Excel questions). It references an images_understand tool to analyze uploads and asks to 'provide download link' after saving the Excel file — those are implicit platform capabilities not defined in the skill, so you should confirm the agent environment provides images_understand and a way to share generated files. The instructions do not request unrelated files, system paths, or credentials.
Install Mechanism
There is no install spec (instruction-only), which is low risk in general, but the shipped scripts require Python and the openpyxl package. The skill does not declare those requirements or provide an install step, so the agent may fail at runtime or silently skip functionality. No downloads or external install URLs are present.
Credentials
The skill requests no environment variables, credentials, or config paths. The scripts only read supplied JSON or SKILL.md/_meta.json (validation script). There is no evidence of access to unrelated credentials or sensitive system files.
Persistence & Privilege
always is false and disable-model-invocation is false (normal). The skill does not request persistent system-wide changes or modify other skills' configs.
What to consider before installing
This skill mostly does what it claims, but check two things before installing: (1) confirm the agent/runtime provides Python and the openpyxl package (or add an install step) because the included script depends on it; (2) confirm the availability of the referenced images_understand image-analysis tool and how generated files will be served/shared (the SKILL.md mentions providing a download link but does not implement hosting). No credentials are requested and included scripts are local and benign, but if you plan to run the Python scripts in an environment without those capabilities, the skill may fail.Like a lobster shell, security has layers — review code before you run it.
latestvk977bazswspb4b5r5er6byj3w183kkvp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.