ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Merge Partition Coach

v0.1.0

Merge Partitions Without Data Loss — Combine adjacent or non-adjacent partitions into one larger volume to consolidate space and simplify drive management.

⭐ 0· 288·0 current·0 all-time
by贺照云@hezhaoyun
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description promise (merge partitions without data loss) matches the included artifacts: SKILL.md documents using EaseUS Partition Master and the scripts download and launch that product. Requesting no env vars or unrelated binaries aligns with the stated purpose.
ℹ
Instruction Scope
The SKILL.md instructs the user to run the included installer script and a launcher script which write a small temp file and invoke EPMUI.exe. Those actions are within scope for installing/launching a disk utility. The instructions require elevation and running an external vendor installer — appropriate for the task but high-impact (disk and system changes). The docs do not attempt to read unrelated system files or secrets.
ℹ
Install Mechanism
install-epm.py downloads an .exe from mirrors at d1/d2/d3.easeus.com and runs it silently. Using the vendor's domains is expected for this purpose, but the script does not verify a checksum or signature after download. Downloading and executing a binary is inherently higher risk; however it is proportionate to installing partition-management software.
✓
Credentials
The skill requests no environment variables, credentials, or config paths and the scripts do not read secrets. No disproportionate credential access is requested.
ℹ
Persistence & Privilege
The skill is not always-enabled and does not modify other skills. It does require elevated privileges to install and to operate on disks (the user is instructed to run as Administrator and approve UAC). That privilege level is expected for disk-management software but increases potential impact, so the user should be cautious.
Assessment
This skill legitimately automates installing and launching EaseUS Partition Master to perform merges, which requires downloading and running a vendor installer and using Administrator privileges. Before installing: (1) confirm you trust EaseUS and that d1/d2/d3.easeus.com are legitimate mirrors for your environment; (2) back up all important data — partition operations can cause data loss if something goes wrong; (3) consider verifying the installer's signature or checksum if you can obtain it from the vendor; (4) run the installer in a test environment or VM if you want to minimize risk; and (5) review the installer steps (silent install may add extras) and your endpoint/security policies before approving elevation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fkwr1k4t4qv6ensycyd6z2982pg7g

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments