Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ask

v6.2.0

小智追问框架 v6.2 — 结构化追问与深度分析引擎。 核心能力:接收模糊判断 → 通过结构化追问收敛 → 输出带置信度的清晰结论。 ## 声明的运行时权限 | 资源 | 用途 | 路径 | |------|------|------| | SQLite 存储 | 跨会话批评记忆 | /workspace/ask...

0· 104·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill claims to do structured 'ask/critic' workflows and the SKILL.md describes workflows (triage, scoring, Monte Carlo, critic subagent) that align with that purpose. Using a small persistent store for cross‑session 'critic memory' and external web search for evidence checks is coherent with the stated goal.
!
Instruction Scope
SKILL.md instructs the agent to read/write a SQLite DB at /workspace/ask-memory.db, spawn a 'critic' subagent (sessions_spawn), call a web search tool (batch_web_search), and run Monte‑Carlo via python3. The registry metadata lists no required binaries or env vars — a mismatch: the instructions implicitly require Python and persistent workspace access. The DB write/read behavior is explicit and will persist user-supplied evidence across sessions (privacy risk).
Install Mechanism
Instruction-only skill with no install spec or external downloads; no code files to install. This is low risk from an installation/mechanism perspective.
Credentials
The skill declares no secrets or external credentials, which is appropriate. However it persists potentially sensitive session contents to /workspace/ask-memory.db and uses web search (external queries). If your use involves private data, that persistent storage and outgoing queries may expose it — the SKILL.md does not document any data sanitization or retention policy.
Persistence & Privilege
The skill will create/read a persistent SQLite DB in the agent workspace and spawns independent 'critic' subagents to cross-check conclusions. always:false (normal). Persistent storage and subagent spawning are reasonable for the feature set, but combined they increase the blast radius (persisted data + spawned processes that may access context).
What to consider before installing
Things to check before installing: - Expect persistent storage: the skill will read/write /workspace/ask-memory.db and thereby retain 'weak evidence' across sessions. If you handle private/sensitive inputs, confirm how long that DB is kept and who can access it (or disable the memory). - Python requirement: SKILL.md uses python3 for Monte Carlo simulations but the registry lists no required binaries; ensure your agent environment has python3 available or ask the author to make the requirement explicit. - Outgoing queries: the skill uses a 'batch_web_search' tool. Confirm whether queries include user-provided sensitive text and where those queries go (external search provider). - Subagent spawning: sessions_spawn will create independent critics; confirm your platform's subagent isolation and what data they can access. - If you are uncomfortable with persistent cross‑session memory or external queries, consider asking the publisher to remove or gate the SQLite writes, add explicit opt‑out, and make runtime requirements explicit. - Because the registry metadata and SKILL.md disagree (no declared binaries/env vs instructions that use python3 and a workspace DB), treat the discrepancy as an unresolved risk and seek clarification from the publisher before enabling this skill on sensitive agents.

Like a lobster shell, security has layers — review code before you run it.

adaptivevk97675t8mk5x2ppyehrfzjg5fh84as99adversarialvk9716436mbehrszx2nt04vp1wn84b909beam-searchvk97675t8mk5x2ppyehrfzjg5fh84as99bloom-taxonomyvk9716436mbehrszx2nt04vp1wn84b909critical-thinkingvk9716436mbehrszx2nt04vp1wn84b909latestvk97fqwy12aydekq3g43t5evntn84cck0multi-agentvk9716436mbehrszx2nt04vp1wn84b909quantitativevk97675t8mk5x2ppyehrfzjg5fh84as99researchvk97675t8mk5x2ppyehrfzjg5fh84as99sqlite-memoryvk97675t8mk5x2ppyehrfzjg5fh84as99triagevk97675t8mk5x2ppyehrfzjg5fh84as99uncertaintyvk97675t8mk5x2ppyehrfzjg5fh84as99v4vk9716436mbehrszx2nt04vp1wn84b909v6vk97675t8mk5x2ppyehrfzjg5fh84as99

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments