Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Hersheys

v1.0.0

Operate America’s largest chocolate maker with integrated cocoa processing, a unique charitable trust governance, a dominant U.S. market share, and a heritag...

0· 73·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for hanxueyuan/hersheys.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Hersheys" (hanxueyuan/hersheys) from ClawHub.
Skill page: https://clawhub.ai/hanxueyuan/hersheys
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install hersheys

ClawHub CLI

Package manager switcher

npx clawhub@latest install hersheys
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, and SKILL.md content are purely informational about Hershey's corporate history, market position, and supply chain. There are no declared binaries, env vars, or config paths, so the requested footprint matches the stated purpose.
!
Instruction Scope
The runtime instructions are just content and do not ask the agent to read files, network endpoints, or secrets. However, the SKILL.md contains a top-line 'trigger: always_on' directive that expands the skill's runtime behavior beyond a simple on-demand information provider. This is an unexpected operational instruction not reflected elsewhere.
Install Mechanism
There is no install spec and no code files; this is low risk from an installation perspective because nothing will be written to disk or downloaded by the skill itself.
Credentials
The skill declares no required environment variables, credentials, or config paths. There is no apparent need for secrets or elevated access to perform the stated informational purpose.
!
Persistence & Privilege
Registry metadata flags show always: false, but the SKILL.md's 'trigger: always_on' suggests the author intends continuous activation. If the platform honors in-document triggers, this could enable persistent presence or autonomous invocation beyond what the registry metadata indicates. That mismatch increases risk and should be clarified.
What to consider before installing
This skill appears to be a benign informational document about Hershey's and requires no credentials or installs. However the SKILL.md contains a 'trigger: always_on' header which conflicts with the registry metadata (which does not set always:true). Before installing: (1) verify with the skill publisher or registry how 'trigger' in SKILL.md is interpreted by your agent platform, (2) prefer installing only if the platform enforces registry flags over in-file directives, (3) test in a sandbox or with network monitoring to confirm it isn't persistently active, and (4) uninstall if you observe unexpected always-on behavior or autonomous actions. If you want, ask me to draft a message to the publisher or to help test the skill in a controlled environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk976nv80rryy4bp69g3ya8gawn85a1jc
73downloads
0stars
1versions
Updated 5d ago
v1.0.0
MIT-0

Hershey's

Summary

America's largest chocolate manufacturer, founded by Milton S. Hershey in 1894, operating as both a consumer confectionery giant and a major cocoa processor with a unique corporate structure tied to a charitable trust.

Read When

  • Analyzing U.S. chocolate industry dynamics and market share
  • Researching corporate governance through charitable trust structures
  • Studying vertical integration in cocoa supply chains
  • Examining American industrial history in Pennsylvania

历史时间线

  • 1893: Milton Hershey founds the Hershey Chocolate Company as a subsidiary of his Lancaster Caramel Company
  • 1905: Hershey, Pennsylvania factory opens, becoming the world's largest chocolate plant
  • 1907: Hershey's Kisses debut using the automated "kissing machine" invented by D'Orlando
  • 1923: Milton S. Hershey establishes the Hershey Trust Company to oversee his philanthropic vision
  • 2017: Hershey acquires Amplify Snack Brands (SkinnyPop, Pirate's Booty) for $1.6 billion, expanding beyond chocolate
  • 2023: Hershey reports over $11 billion in annual revenue, maintaining ~44% U.S. chocolate market share

商业模式

Hershey's operates an integrated value chain from cocoa bean sourcing through manufacturing, distribution, and retail — a vertical structure that compresses costs and protects margins. The company generates revenue across multiple segments: North American chocolate bars and candies (~65% of revenue), grocery/snacks (~20%), and international markets (~15%). Its secret weapon is the Hershey Trust, which controls 30% of voting power, enabling long-term strategic decisions insulated from quarterly shareholder pressure.

护城河分析

Hershey's dominance in American chocolate is reinforced by its near-monopoly on the "American chocolate taste profile" — the specific lipolyzed milk fat flavor that U.S. consumers associate with chocolate, which foreign competitors like Cadbury (owned by Mondelez) have struggled to replicate for the U.S. market. The company's control over Hershey, Pennsylvania's manufacturing infrastructure and its exclusive North American licensing rights for Hershey-branded products create geographic and legal barriers. Additionally, the Hershey Trust's voting control prevents hostile takeovers, a defense that proved effective when Cadbury attempted acquisition in 2016.

关键数据

  • Controls approximately 44% of the U.S. chocolate market, nearly double second-place Mars
  • Annual revenue exceeded $11 billion in 2023
  • Processes over 1 billion pounds of cocoa annually
  • Hershey, Pennsylvania factory produces over 80 million Kisses per day
  • Founded in 1894, making it one of the oldest continuously operating chocolate companies in America

有趣事实

  • The Hershey Trust Company owns the school, park, and museum in Hershey, Pennsylvania — essentially running the town as a company community, a legacy of Milton Hershey's utopian industrial vision.
  • During World War II, Hershey produced the "Tropical Bar" (or "Ration D bar") for U.S. military rations, specifically designed to withstand high temperatures and serve as emergency food — soldiers famously complained it tasted like "a bitter potato," which was intentional to discourage casual snacking.
  • Hershey's Kisses are individually wrapped by machines that fold 70 pieces per minute, and the paper strip inside each wrapper (called a "niggly wiggly") was added in 1921 as a proof of authenticity against counterfeiters.

Comments

Loading comments...