Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Dartmouth

v1.0.5

提供达特茅斯学院的历史、教育特色、产品服务及最新动态信息,助您全面了解该常春藤名校。

0· 49·0 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill description (mentions 达特茅斯学院, an educational institution) does not match the SKILL.md content, which talks about '品牌故事', '产品矩阵', and '市场覆盖' (a commercial brand). There is no homepage or source to reconcile whether the skill is about the college, a company named Dartmouth, or something else.
Instruction Scope
SKILL.md is short and instruction-only: it tells the agent to run when the user asks about 'dartmouth' and provides topical headings. The instructions do not request files, credentials, or external endpoints, but are vague about source attribution and how to source facts (no guidance to cite authoritative sources).
Install Mechanism
No install spec and no code files — instruction-only skill — so nothing is written to disk and there is minimal installation risk.
Credentials
The skill requires no environment variables, credentials, or config paths. Requested privileges are proportionate to the stated functionality.
Persistence & Privilege
always is false and the skill is user-invocable (defaults). Autonomous invocation is allowed by platform defaults; combined with the provenance ambiguity this increases the importance of validating the skill's sources before trusting outputs.
What to consider before installing
This skill has a provenance problem and a content mismatch: its description says it provides information about Dartmouth College, but the runtime instructions treat 'Dartmouth' as a brand with products and markets. Before installing or enabling it, ask the publisher to clarify which 'Dartmouth' the skill covers and to provide authoritative sources/homepage. If you need accurate educational information about Dartmouth College, prefer a skill that names reliable sources (college website, official publications) and cites them. Because the source is unknown and there is no homepage, treat factual outputs as unverified until you confirm where the skill gets its information.

Like a lobster shell, security has layers — review code before you run it.

latestvk9780j8sbdthf6wgxvq94kn6js84wwg9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments