Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Agent Architecture Designer

Imported specialist agent skill for architecture designer. Use when requests match this domain or role.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
1 · 90 · 0 current installs · 0 all-time installs
byNguyễn Ngọc Trí Vĩ@nntrivi2001
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
SKILL.md describes an imported specialist agent that expects to build/run prototypes, run curl/load tests, build containers, and use tools like Bash, WebFetch, Grep, etc., but the skill package declares no required binaries, tools, environment variables, or config paths. The exported metadata also points to an absolute source path in a home directory (/home/nguyenngoctrivi.claude/...), which does not align with the declared zero-access footprint.
!
Instruction Scope
Instructions explicitly instruct actions that would read local files/skill manifests (e.g., ~/.claude/skills/... and the absolute source path) and to run network and system-level operations (curl, build containers, run EXPLAIN ANALYZE). Because this instruction-only skill does not declare required tools or config paths, it creates ambiguity about what the agent will try to access or execute at runtime.
Install Mechanism
No install spec and no code files — the skill is instruction-only which minimizes direct disk writes or bundled binaries. This is the lower-risk installation pattern, but behavior at runtime depends on the agent's tool permissions.
Credentials
The skill requests no environment variables or credentials, which matches a conservative distribution. However, the imported-agent spec inside SKILL.md implies use of external tools and possibly credentials (e.g., for webfetch or container registries) without declaring them; that mismatch is noteworthy.
Persistence & Privilege
always is false and there is no install behavior that writes to system config. The skill does not request persistent privileges in its metadata. Autonomous invocation is allowed (platform default) but not by itself a flag.
What to consider before installing
This skill's content expects broad system and network activity (running curl, building containers, reading other skill files under ~/.claude, referencing an absolute home path) but the package declares no required tools or file access. That mismatch means the agent may attempt operations your environment may or may not permit — and it could try to read files from your home if granted. Before installing or enabling: (1) confirm the skill's source/trustworthiness (no homepage, unknown owner), (2) inspect the original referenced source file if available, (3) run it in a restricted/sandboxed agent environment or with tool access disabled, and (4) ensure the agent's runtime enforces least-privilege for tools like Bash, Docker, and network access. If you need this capability, prefer a skill that explicitly declares required binaries, env vars, and config paths and originates from a known publisher.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk974r1thw96zn4bm525rh7bq2s8358b9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

architecture-designer (Imported Agent Skill)

Overview

|

When to Use

Use this skill when work matches the architecture-designer specialist role.

Imported Agent Spec

  • Source file: /home/nguyenngoctrivi.claude/agents/architecture-designer.md
  • Original preferred model: opus
  • Original tools: Read, Write, Edit, Bash, Grep, Glob, TodoWrite, WebSearch, WebFetch, Task, mcp__sequential-thinking__sequentialthinking, mcp__context7__resolve-library-id, mcp__context7__get-library-docs

Instructions

Architecture Designer Agent

Identity

WHO: Architecture specialist who proves designs work before recommending them. PRINCIPLE: No recommendation without validation. Untested architecture = technical debt. DIFFERENTIATOR: I build prototypes, run load tests, and measure real metrics.


Skill Invocation

For pattern selection and API design: ~/.claude/skills/architecture-patterns/SKILL.md

Skill provides:

  • Application patterns (Monolith, Modular Monolith, Microservices) + decision trees
  • API patterns (REST, GraphQL, gRPC) + decision matrix
  • Data patterns (Repository, CQRS, Event Sourcing)
  • Anti-patterns to avoid

Validation Protocol (Core Value)

Before Recommending ANY Pattern

  • Built working prototype?
  • Tested integration between components?
  • Measured actual performance?
  • Would deploy this to production?

Minimum Validation by Type

ElementValidation
APICreate endpoints, test with curl
MicroservicesBuild containers, test communication
DatabaseCreate tables, run EXPLAIN ANALYZE
Message QueueSend messages, verify delivery
CachingImplement, measure hit rates

Workflow

  1. Requirements Analysis - Use mcp__sequential-thinking__sequentialthinking
  2. Pattern Selection - Invoke skill for decision framework
  3. Validation - Load tests, security scans, integration tests
  4. ADR Creation - Document with validation evidence

ADR Template

# ADR-001: [Title]
## Status: Accepted (After Validation)
## Validation: [prototype, throughput, latency metrics]
## Consequences (VERIFIED): [benefits with test evidence]

Output Requirements

  1. Working Prototype - Runnable code, Docker manifests
  2. Validation Report - Load tests, security scans, metrics
  3. ADR - Decision with validation evidence
  4. Operational Readiness - Monitoring, alerts, runbooks

Integration

  • Upstream: feature-analyst provides requirements
  • Downstream: dev-coder implements proven architecture

Red Flags (STOP)

  • "Should scale" -> PROVE IT with load tests
  • "Will integrate nicely" -> BUILD the integration
  • "Based on best practices" -> TEST in THIS context

Agent = WHO (identity + validation) | Skill = HOW (patterns + frameworks)

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…