Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

MP3 Tag Cleaner

v1.0.0

Batch remove promotional metadata from MP3 ID3v1 and ID3v2 tags while preserving audio data and file integrity.

0· 69·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for haiyangzhang888/mp3-tag-cleaner.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "MP3 Tag Cleaner" (haiyangzhang888/mp3-tag-cleaner) from ClawHub.
Skill page: https://clawhub.ai/haiyangzhang888/mp3-tag-cleaner
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install mp3-tag-cleaner

ClawHub CLI

Package manager switcher

npx clawhub@latest install mp3-tag-cleaner
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (remove ID3 tags) match the included C# source which strips ID3v1/v2 frames and preserves audio data. The skill does not request unrelated credentials or system-level access, so capabilities are generally proportionate to purpose.
!
Instruction Scope
The SKILL.md instructs the user to generate a file list for the folder they want cleaned and run tools/id3clear2.exe. The C# program, however, hard-codes fileListPath = C:\Users\Haiyang\AppData\Local\Temp\mp3files_1_100_utf8.txt and tempDir = C:\Temp\MP3Work_ID3. That mismatch means the instructions do not reflect the actual runtime behavior. The program will delete and recreate the temp directory (Directory.Delete(..., true)), copy files there, overwrite originals, and finally delete the temp dir — which is destructive if the hard-coded path is shared or contains other data.
Install Mechanism
No install spec or binary is included in the registry package (instruction-only). Source code is present (tools/ClearID3v12.cs) and SKILL.md suggests compiling with csc.exe; no remote downloads or obscure installers are used.
Credentials
The skill declares no required environment variables, credentials, or config paths. The only environment-like behavior is hard-coded filesystem paths inside the source (user temp path and C:\Temp), which are unnecessary for a generic tool and reduce portability but are not secret access requests.
Persistence & Privilege
always:false and the skill does not request persistent privileges or modify other skills. It does overwrite files on disk (its stated function) and removes a temp directory, which is expected behavior but should be handled carefully.
What to consider before installing
Be aware this package contains C# source but the SKILL.md implies a prebuilt tools/id3clear2.exe; the provided program hard-codes a file-list path (C:\Users\Haiyang\AppData\Local\Temp\mp3files_1_100_utf8.txt) and a temp directory (C:\Temp\MP3Work_ID3) and will recursively delete and recreate that temp directory. Before running anything: (1) review the source yourself or have it reviewed; (2) do not run any untrusted compiled exe — compile from source in a controlled environment if needed; (3) modify the program to accept a folder or file-list argument instead of the hard-coded path (or create the expected file list at the hard-coded path deliberately); (4) backup your MP3 files first (the tool overwrites originals and removes ID3v1 tags permanently); (5) be cautious that Directory.Delete(tempDir, true) will remove the entire temp directory — pick a unique temp path to avoid accidental data loss. These are engineering/incoherence concerns rather than clear signs of exfiltration or malware, but they merit caution.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ctzfzhey3w6kz0wh7zxazmh84f1jk
69downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

MP3 Tag Cleaner

清除MP3文件元数据中的推广信息(标题、唱片集、艺术家、作者等),让你的音频库干净整洁。

核心功能:批量清除MP3文件的ID3v1和ID3v2标签中的推广信息,同时保留音频数据完整性。

触发词

  • 清除MP3属性
  • 清理MP3标签
  • 删除MP3推广信息
  • 清除音频文件元数据
  • 清理歌曲属性
  • 删除音频推广

功能说明

批量清除MP3文件中的ID3v1和ID3v2标签,包括:

  • 标题 (TIT2)
  • 唱片集 (TALB)
  • 艺术家 (TPE1)
  • 专辑艺术家 (TPE2)
  • 参与艺术家 (TPE3)
  • 作者 (TYER)
  • 评论 (COMM)
  • 封面图片 (APIC)
  • 等其他所有文本标签

使用方法

用户指定要清理的文件夹路径后,执行以下步骤:

  1. 生成该文件夹内所有MP3文件的路径列表(UTF-8编码)
  2. 运行 tools/id3clear2.exe 清除标签
  3. 验证清理结果

工具文件

  • tools/id3clear2.exe - 已编译的可执行程序
  • tools/ClearID3v12.cs - C#源码(如需重新编译)

技术细节

  • 直接操作MP3二进制文件,移除ID3v1(文件末尾128字节)和ID3v2(文件开头)标签
  • 保留MP3音频数据和文件可播放性
  • 使用临时目录策略避免百度网盘等文件夹的写保护问题
  • 编译命令:C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /nologo /out:tools/id3clear2.exe tools/ClearID3v12.cs

注意事项

  • 处理前程序会自动复制文件到临时目录,修改后再移回原位
  • 会删除ID3v1标签(可能导致文件末尾128字节的专辑信息消失),但保留音频数据

Comments

Loading comments...