Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Fabric Bridge
v1.0.0Run Fabric AI patterns for text transformation, analysis, and content creation. Use when the user asks to use a Fabric pattern, extract wisdom, analyze claims, improve writing, summarize with Fabric, or mentions 'fabric' CLI. Supports 242+ patterns for tasks like content analysis, writing improvement, code review, threat modeling, and structured extraction.
⭐ 2· 1.6k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description match the instructions: it is a wrapper for the fabric-ai CLI and documents patterns and commands you would expect. The SKILL.md requires the fabric-ai CLI (and contains metadata to install it via Homebrew), which is appropriate for a CLI bridge.
Instruction Scope
Instructions are narrowly scoped to using the fabric-ai CLI: piping text/files, processing URLs/YouTube, chaining patterns, streaming, saving output, and creating custom patterns under ~/.config/fabric. There are no hidden network endpoints or instructions to read unrelated system files. The doc does instruct users to run `fabric-ai -S` to configure API keys and to use `-U` to update patterns — both are normal for this CLI.
Install Mechanism
The skill is instruction-only (no code files) and includes metadata suggesting a Homebrew formula 'fabric-ai' as the install path. Homebrew is a standard installer, but the SKILL.md does not declare a direct download URL. You should verify the formula's origin (which tap) before installing to ensure it comes from a trusted source.
Credentials
The skill declares no required environment variables, but the CLI requires API key configuration (`fabric-ai -S`) and will store keys/config under ~/.config/fabric. The skill doesn't enumerate or request any external credentials itself — this is coherent for a CLI wrapper — however you should be aware that API keys (for LLM providers) are needed and will be handled/stored by the CLI outside the skill's manifest.
Persistence & Privilege
The skill does not request 'always: true' and does not modify other skills. It does, however, document creating and editing files under ~/.config/fabric (custom patterns) and using the CLI to save outputs to files or clipboard; it also instructs users to run a setup step that will configure API keys. These are expected effects of a CLI bridge and not an elevated privilege for the skill itself.
Assessment
This skill is a documentation bridge to the fabric-ai CLI (no code bundled). Before installing or running, verify the Homebrew formula's origin (which tap) and inspect the fabric repository linked in the SKILL.md. Understand that fabric-ai will prompt you to configure API keys and will store them and custom patterns under ~/.config/fabric; do not feed sensitive secrets or private data into the CLI unless you trust the upstream LLM provider and the fabric tool. If you need to run this in an automated agent context, ensure the agent has only the minimal API credentials it needs and that you accept the CLI's network calls to external LLM services.Like a lobster shell, security has layers — review code before you run it.
latestvk974qvpdbfgwdrmn50318xhg65805mnx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧶 Clawdis
Binsfabric-ai
Install
Install Fabric AI (brew)
Bins: fabric-ai
brew install fabric-ai