Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
tangyuan-parenting
v1.0.0This skill should be used when the user wants to manage daily parenting plans, record caregiver feedback logs, dynamically adjust childcare schedules, or gen...
⭐ 0· 91·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (daily plans, feedback logs, weekly reports) match the behavior in SKILL.md and the included log_manager.py. The files and templates are appropriate for generating plans and storing/retrieving logs.
Instruction Scope
Runtime instructions stay on-topic (generate plans, log feedback, summarize week). They call the included Python script to read/append logs and use an agent web_search tool for weather. Note: using web_search will send queries externally (expected for weather lookup) and the skill reads/writes local log files (expected for a diary/logging app).
Install Mechanism
No install spec and no external downloads; this is an instruction-only skill with a bundled script. That minimizes installer risk — nothing is fetched from remote URLs.
Credentials
No credentials or sensitive env vars are required. The included script optionally reads TANGYUAN_LOG_DIR to choose the log directory (defaults to current working directory). That environment variable is reasonable but is not declared in requires.env — consider this a minor mismatch and be aware it can change where logs are stored.
Persistence & Privilege
always is false and the skill does not request persistent platform-wide privileges. It stores data only in local markdown files (or a directory pointed to by TANGYUAN_LOG_DIR) and does not modify other skills or global agent config.
Assessment
This skill appears coherent and implements local logging and plan generation as described. Before installing: (1) note it will create/read markdown logs under the agent's working directory by default (or under a directory you set via the TANGYUAN_LOG_DIR environment variable) — ensure that storage location is acceptable and secure; (2) the skill uses web_search for weather, which sends queries externally; (3) review the included scripts if you want to confirm there is no additional telemetry; and (4) consider privacy/legal implications of storing a child's personal data where the agent runs (backups, access controls, retention). If any of those are unacceptable, do not install or set TANGYUAN_LOG_DIR to a secure path and review file permissions.Like a lobster shell, security has layers — review code before you run it.
latestvk9725fegh1j4x8n2mzq166yfvx8362fc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.