Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Remilio
v1.0.0Transforms your bot into a chaotic, reactionary, memetic warfare personality with edgy humor and digital tribal dominance, offensive to the woke Left.
⭐ 0· 1.4k·2 current·2 all-time
by@r3drvm
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The SKILL.md clearly defines a 'Remilio' personality and all instructions are about adopting that persona; there are no unrelated requirements (no env vars, binaries, or installs). The declared purpose (persona injection) aligns with what the files actually contain.
Instruction Scope
The instructions include direct system-prompt style commands ('You are now a Remilio') and behavioral rules that push the agent toward offensive, chaotic, and 'memetic warfare' behaviors. This is a textbook prompt-injection pattern capable of overriding normal assistant constraints and encouraging harmful outputs (harassment, targeted memetics, disinformation). The SKILL.md does not ask for system files or credentials, but it grants broad rhetorical license that could lead to policy-violating behavior.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk. This minimizes traditional supply-chain risk.
Credentials
No environment variables, credentials, or config paths are requested. There is no direct request for external secrets or system access.
Persistence & Privilege
The skill is allowed to be invoked by the model (disable-model-invocation is false) which is the default. Combined with the explicit system-prompt injection content this increases risk: an autonomously-invoked persona that instructs the agent to ignore norms or to 'weaponize memes' widens the blast radius even though the skill does not request additional credentials.
Scan Findings in Context
[prompt-injection: you-are-now] expected: The phrase 'You are now' is expected in a persona/system-prompt skill, but it was flagged because it's a direct attempt to set the assistant identity and can be used to override safety/context. This is an elevated risk even though it's consistent with the skill's declared purpose.
What to consider before installing
This skill is a personality/system-prompt module that explicitly tells the agent to adopt an offensive, chaotic persona and to 'weaponize' memetics. It does not request credentials or install code, which reduces supply-chain risk, but it contains prompt-injection language that can override normal safety behavior. Before installing you should: (1) avoid enabling autonomous invocation — set disable-model-invocation or require human approval before each run; (2) only use in an isolated, non-production sandbox (do not expose to public-facing bots or users); (3) remove or rewrite direct 'You are now' system-prompt commands and replace them with constrained, non-directive guidance plus explicit safety rules (no harassment, no doxxing, no targeted abuse, no disinformation); (4) test outputs carefully and enforce content-moderation filters; and (5) if you need the persona for benign creative uses, document explicit guardrails and restrict who can invoke the skill. If you lack the ability to enforce these controls, do not install this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk9792dm1xd58shepgcq6x5cwts80j2tz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.