Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Super Blueauto

v0.1.0

Cross-platform AI skill for local Bluetooth device control, enabling scan, connect, monitor, and manage all BLE devices without cloud or data collection.

0· 273·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for josephsuo/super-blueauto.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Super Blueauto" (josephsuo/super-blueauto) from ClawHub.
Skill page: https://clawhub.ai/josephsuo/super-blueauto
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install super-blueauto

ClawHub CLI

Package manager switcher

npx clawhub@latest install super-blueauto
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims full, cross-platform BLE control (Windows, macOS, Android, iOS, HarmonyOS, Linux, embedded), but there are no code files, no install steps, no required binaries, and no declared native helpers. Controlling Bluetooth devices across those OSes normally requires platform-specific binaries, native apps, entitlements, or background services and explicit user permissions; an instruction-only document cannot realistically provide autonomous local BLE control on every listed OS. This is a capability–requirement mismatch.
!
Instruction Scope
SKILL.md is mostly high-level marketing and feature claims. It states the agent will 'access local system Bluetooth APIs' and perform reads/writes, but it gives no concrete runtime instructions (no commands, no library imports, no platform adapters, no file paths). The guidance is vague and grants broad discretion to the agent without boundaries, which is scope-creep: it doesn't constrain what the agent may try to access or how it will obtain the ability to control hardware.
Install Mechanism
There is no install spec and no code to fetch or execute. That reduces attack surface (nothing is written to disk by the skill itself). However, the lack of any install mechanism is also the reason the skill cannot plausibly implement the advertised cross-platform capabilities on its own.
!
Credentials
The skill declares no required environment variables or credentials, yet its claimed functionality would typically require platform permissions, system-level APIs, or helper executables. The absence of any declared permissions, config paths, or helper requirements is inconsistent with the scope of operations (especially iOS/macOS entitlements and Android runtime permissions).
Persistence & Privilege
The skill is not marked 'always: true' and uses default invocation settings. It doesn't request persistent system presence in its metadata. Because it's instruction-only, it does not appear to install background services or modify other skills, but the SKILL.md does not clarify whether any persistent helper would be required — ask the author before granting ongoing privileges.
What to consider before installing
This skill reads like a product pitch rather than a runnable skill. Before installing or trusting it, ask the publisher for: (1) source code or a hosted repository/homepage showing how it hooks into platform Bluetooth APIs; (2) platform-specific installers or native helpers (and their install steps) for Windows, macOS, Android, iOS, etc.; (3) a clear list of runtime permissions and exactly what the skill will do with device data; and (4) whether any background service or native binary will be installed. Do not grant broad Bluetooth or system permissions, or install unknown helper binaries, without reviewing their source. If the author cannot provide technical details or code, treat the skill as unproven and avoid giving it access to devices — the current package is inconsistent with its claims.

Like a lobster shell, security has layers — review code before you run it.

latestvk971sek2bbzcv70ynkq39seahh82s14y
273downloads
0stars
1versions
Updated 5h ago
v0.1.0
MIT-0

SuperBlueAuto

Universal Bluetooth AI Agent • Cross-Platform Bluetooth Control Hub

One Skill. One AI. Control All Bluetooth Devices.


Introduction

SuperBlueAuto is a cross-platform, AI-native, local-first intelligent control hub for Bluetooth devices. One single skill supports all major operating systems:

  • Windows
  • macOS
  • Android
  • iOS / iPhone
  • HarmonyOS
  • Linux
  • Embedded Devices

Control any Bluetooth / BLE device with natural language, regardless of brand or system. Supports lights, sockets, sensors, wearables, speakers, locks, health devices, remotes, and all BLE-compliant hardware.

All operations run locally. No cloud uploads. No data collection.


Platform Support

✅ Windows ✅ macOS ✅ Android ✅ iOS ✅ HarmonyOS ✅ Linux ✅ Embedded / Development Boards


Core Capabilities

  • Scan nearby Bluetooth / BLE devices
  • Connect, disconnect, and monitor device status
  • Read device information: name, MAC, battery, signal, services
  • Read/write Bluetooth characteristics and serial communication
  • Batch management for multiple devices
  • Custom device adaptation rules

Natural Language Examples

  • Scan for nearby Bluetooth devices
  • Connect to my Bluetooth light / socket / sensor
  • Read device battery level and signal strength
  • Turn on / off the Bluetooth device
  • Disconnect all Bluetooth devices in batch

Permission Statement

  • Only accesses local system Bluetooth APIs
  • No mandatory network permissions
  • No device data upload
  • No privacy collection
  • No remote control without explicit user consent

Version

v1.0.0 – Initial Cross-Platform Framework Release


Positioning

The first truly cross-system, cross-brand, full-platform Bluetooth AI skill on ClawHub.

Comments

Loading comments...