Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

State Council

v1.0.1

提供国务院政策文件、行政法规、机构设置及政务动态信息,助您了解国家行政机关相关内容。

1· 76·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Declared description (国务院政策文件、行政法规、政务动态) implies a government/policy information skill, but SKILL.md content is a generic 'brand/company overview' template (brand history, products, market, competitors). This mismatch suggests the skill may be mislabeled, copy-pasted, or not delivering the promised functionality.
Instruction Scope
SKILL.md is short, contains only read_when triggers and a brief content template; it does not instruct the agent to read files, access credentials, or transmit data to external endpoints. It stays within a narrow, non-invasive scope.
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes disk writes and installation risk.
Credentials
The skill requests no environment variables, no credentials, and no config paths. There is no disproportionate access requested.
Persistence & Privilege
always is false and user-invocable; the skill does not request elevated or persistent privileges and does not modify other skills or system settings.
What to consider before installing
This skill appears internally inconsistent: its description promises official State Council policy information, but the instructions are a generic organization-profile template. Before installing or relying on it, ask the publisher (or the registry) for clarification and a homepage/source for verification. Because the skill has no code and asks for no credentials, it is low technical risk, but it may not provide the information you expect (or could be an incomplete/placeholder upload). If you need authoritative government policy documents, prefer verified official sources (official government websites) or skills that reference official APIs or reputable sources.

Like a lobster shell, security has layers — review code before you run it.

latestvk978yp5cc37yes3dc63q47gzr984wpbb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments