ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Query DBpedia using Natural Language

v1.0.0

Transform natural language questions into SPARQL queries for DBpedia and generate beautiful HTML results pages. Query the DBpedia knowledge graph using plain...

⭐ 0· 560·0 current·0 all-time
byKingsley Idehen@kidehen
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description align with what the skill does: SKILL.md and example files all describe converting NL to SPARQL, calling the DBpedia SPARQL endpoint, and formatting results into JSON/Markdown/HTML. No unrelated credentials, binaries, or capabilities are requested.
✓
Instruction Scope
Runtime instructions are specific: analyze question → map to DBpedia properties → build SPARQL → execute via HTTP GET (example curl) against https://dbpedia.org/sparql → format results. The instructions reference only the DBpedia endpoint and included HTML templates; they do not ask to read arbitrary local files, access unrelated env vars, or post data to third‑party/obfuscated endpoints.
✓
Install Mechanism
No install spec and no code files that would be written to disk; it's instruction-only with HTML templates and examples included. This is the lowest-risk install model.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. That is proportionate for a read-only query-to-DBpedia skill.
✓
Persistence & Privilege
always:false and no request to modify other skills or system-wide settings. The skill does not request permanent presence or elevated privileges.
Assessment
This skill appears coherent and read-only: it builds SPARQL queries, issues HTTP GET requests to https://dbpedia.org/sparql, and renders results. Before installing/using, consider: 1) The SKILL.md shows curl-based execution — ensure your agent environment allows outbound HTTP and has a suitable HTTP client (curl or equivalent). 2) Results are rendered into HTML templates; if you plan to open generated HTML in a browser, treat external DBpedia content as untrusted and review/sanitize fields to avoid XSS (escape labels/values). 3) Long or complex SPARQL queries can time out or return large results—use LIMIT and test queries incrementally. 4) The skill makes live network requests to dbpedia.org (expected); verify that fits your network/security policy. Overall, there are no unexplained credentials, installs, or hidden endpoints, so the skill appears to do what it claims.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f4bz68ytw5nbt2g355m262h81dy2g

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments