Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Chinese Lunar Calendar

Chinese content writing and editing toolkit. Use when generating articles, polishing copy, creating outlines, tracking trends, or adapting content for Chines...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 323 · 4 current installs · 4 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The registry entry and SKILL.md mix two related purposes: a Chinese lunar calendar (scripts/calendar.sh) and a Chinese content-writing toolkit (scripts/script.sh). Both are present and their behavior matches those purposes, but the skill name/description could be clearer about the dual nature.
Instruction Scope
SKILL.md simply instructs the agent to run scripts/script.sh <command>. The scripts operate on local data, accept simple command arguments, and do not access files or environment variables beyond the declared optional CHINESE_LUNAR_CALENDAR_DIR/XDG_DATA_HOME/HOME. There are no instructions to read unrelated system files or send data to remote endpoints.
Install Mechanism
This is an instruction-only skill with no install spec. The shipped scripts are plain shell (and an embedded Python algorithm in calendar.sh) and nothing is fetched from external URLs during install.
Credentials
The skill requires no credentials or special environment variables. It uses an optional CHINESE_LUNAR_CALENDAR_DIR (or XDG_DATA_HOME/HOME) for storage — reasonable and proportional to the functionality.
Persistence & Privilege
always is false and the skill is user-invocable. It creates and writes to a local data directory (~/.local/share/chinese-lunar-calendar or ~/.chinese-lunar-calendar) and appends to history.log, but it does not request elevated or global agent privileges.
Assessment
This skill appears to be what it claims: a small local toolkit containing (1) a lunar-calendar calculator and (2) a simple Chinese content-helper CLI. It stores logs and history in a local data directory (defaults to ~/.local/share/chinese-lunar-calendar or ~/.chinese-lunar-calendar). Before installing or invoking it, consider: (1) the repo mixes calendar and content-tool functionality—inspect both scripts if you want clarity; (2) scripts/script.sh appends user inputs to history.log in the data directory, so avoid passing sensitive secrets as arguments; (3) run the scripts in a sandbox if you want to verify there are no unexpected network calls in the truncated portion of calendar.sh; otherwise it runs offline and no credentials are required.

Like a lobster shell, security has layers — review code before you run it.

Current versionv3.0.1
Download zip
chinesevk97dwr5p6n3m65dpzvyd3jqjfd82nrj3latestvk978fpc4dv9kg112h6avkrpgj98362c1productivityvk97dwr5p6n3m65dpzvyd3jqjfd82nrj3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

chinese-lunar-calendar

CLI tool for chinese lunar calendar

Commands

write

scripts/script.sh write

title

scripts/script.sh title

outline

scripts/script.sh outline

polish

scripts/script.sh polish

hashtag

scripts/script.sh hashtag

platform

scripts/script.sh platform

hot

scripts/script.sh hot

template

scripts/script.sh template

translate

scripts/script.sh translate

proofread

scripts/script.sh proofread

help

scripts/script.sh help

version

scripts/script.sh version

Examples

scripts/script.sh help
scripts/script.sh write

Configuration

VariableRequiredDescription
CHINESE_LUNAR_CALENDAR_DIRNoData directory (default: ~/.chinese-lunar-calendar/)

Data Storage

All data saved in ~/.chinese-lunar-calendar/. Runs on your machine without external calls.

Requirements

  • bash 4.0+

Powered by BytesAgain | bytesagain.com | hello@bytesagain.com

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…