Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Cli
v0.1.0Provides CLI commands to list, inspect, and check eligibility of moltbot skills and their requirements.
⭐ 0· 2.1k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The SKILL.md clearly documents usage of the `moltbot skills` CLI (list/info/check) and intends to help inspect/debug local skills. However the skill metadata is very generic (name 'Cli', no description) and does not declare the `moltbot` binary as a required dependency. That omission is incongruent with the stated purpose (inspecting skills via the CLI).
Instruction Scope
The runtime instructions are simple command examples that stay within the scope of inspecting skills and checking eligibility. They instruct the agent to run `moltbot skills` commands, which will read local skills/config state — appropriate for the stated purpose and not requesting unrelated file access or external endpoints.
Install Mechanism
There is no install spec and no code files (instruction-only). This is low-risk from an installation perspective because nothing is written to disk by the skill itself.
Credentials
The skill requests no environment variables or binaries in metadata, yet the instructions require the `moltbot` CLI and implicitly rely on whatever configuration or credentials that CLI uses. The skill should declare required binaries and any environment/config that `moltbot` needs so users can judge proportionality; the omission is a meaningful gap.
Persistence & Privilege
The skill does not request always-on presence and does not modify other skills or system settings. It appears to be a read-only helper for invoking the `moltbot` CLI, so no elevated persistence privileges are requested.
What to consider before installing
This skill is a short reference for running `moltbot skills` commands. Before installing, verify you have the `moltbot` CLI available on the system and check what config/credentials that CLI reads (it may access local skill configs or tokens). Because the skill metadata does not declare `moltbot` as a required binary or list any environment variables, treat that as an omission rather than proof of safety—either run the commands yourself first to see their outputs, or ask the publisher to update the metadata to declare required binaries and any env/config needs.Like a lobster shell, security has layers — review code before you run it.
latestvk97db7k1603jfkcg7dsc5hpqan804ap2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.