Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Oxford

v1.0.3

牛津大学介绍和申请指南

0· 95·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill's name/description promise '牛津大学介绍和申请指南' (Oxford introduction and application guide), but the SKILL.md provides a generic 'information station' / company-style profile (history, business scope, global layout, latest news) and contains no application/admissions guidance, entry requirements, or course-specific information. This is an internal inconsistency: someone wanting application guidance would not get it from the provided instructions.
Instruction Scope
The SKILL.md is instruction-only and only defines readable content modules and simple 'read_when' triggers. It does not instruct the agent to read files, access environment variables, run commands, or transmit data to external endpoints beyond a generic 'visit official website' suggestion.
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is written to disk and no third-party packages are fetched — minimal install risk.
Credentials
The skill requires no environment variables, credentials, or config paths. Requested privileges are proportionate (none) to the stated functionality.
Persistence & Privilege
always:false and default autonomous invocation are set (normal). The skill does not request persistent presence or modify other skills or system-wide settings.
What to consider before installing
This skill appears low technical risk because it is instruction-only, but it is inconsistent with its advertised purpose: it promises an Oxford application guide yet only provides a generic organization-profile template. Before installing or relying on it, ask the publisher for clarification or a sample response showing actual admissions guidance and sources. Test the skill with specific application questions and verify answers against Oxford's official website. Do not provide any personal or sensitive credentials to the skill (none are required). If you need reliable admissions help, prefer skills that cite official pages or are maintained by known/verified sources.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c86fwjh8dqy9wk8jzgm34hh84wjjs

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments