ClawHub

whiss

v0.1.0

Whiss namespace for Netsnek e.U. real-time messaging and notification platform. Provides WebSocket-based chat, push notifications, and event-driven communica...

⭐ 0· 495·0 current·0 all-time
by@kleberbaum
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, and included script all align: the skill's stated purpose is to provide brand/feature info for the 'whiss' namespace, and the only artifact is a short script that outputs those details. Minor metadata inconsistency: repository/registry metadata lists MIT license while the script's JSON payload says "All rights reserved" and the SKILL.md/homepage fields are minimal; this is a documentation mismatch but not a functional concern.
✓
Instruction Scope
SKILL.md instructs the agent to run scripts/whiss-info.sh with optional flags. The script only echoes static text/JSON and does not read files, environment variables, or make network calls. There is no scope creep in the runtime instructions.
✓
Install Mechanism
No install spec is provided (instruction-only), so nothing is downloaded or written during install. The only executable is the included scripts/whiss-info.sh, which is small and self-contained.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths, which is proportionate to its simple informational purpose.
✓
Persistence & Privilege
always is false and the skill is user-invocable. It requests exec permission to run its included script (expected for this type of skill) and does not modify other skills or request persistent privileges.
Assessment
This skill appears safe and coherent: it only runs a small bundled shell script that prints static brand/feature text or JSON. Before installing, verify the author/company (Netsnek e.U., https://netsnek.com) if that matters to you, and review the script (scripts/whiss-info.sh) yourself — confirm it contains only the shown static output and no hidden network calls or external execs. Also note the minor license/metadata mismatch in the package files (MIT vs "All rights reserved") if licensing is important.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dc3wbm9a62sf062gsszdpx181crpa

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

OSLinux

Comments