Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Presale Service Bootstrap

Scaffold a new presale service foundation (docs/config/plans/readiness) before coding. Use when starting a new presale automation service, rebuilding project...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 359 · 0 current installs · 0 all-time installs
byDima Tsiomo@DTsiomo
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skill's name and description describe scaffolding a presale service; the SKILL.md and the two reference docs strictly instruct creating docs, configs, plans, readiness checks, and repo structure. There are no unrelated environment variables, binaries, or install steps requested, so the declared purpose aligns with the actual requirements.
Instruction Scope
The runtime instructions stay within scaffolding/documentation generation scope (creating docs/, config/, plans, readiness checklist, etc.). They do, however, recommend running tools/new-presale-service.ps1 'from this skill pack' — but that file is not present in the package listing. If a scaffold script is later provided, inspect it before running because instruction-only skills rely on the agent executing commands you might not expect.
Install Mechanism
No install spec is present (lowest-risk form). Minor inconsistency: the SKILL.md recommends running a PowerShell script, but the skill does not declare any required binaries (e.g., PowerShell) nor include that script in the manifest. This is an implementation gap rather than an active install risk in the current package.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That matches its stated purpose of local repo scaffolding and documentation creation; nothing appears disproportionate.
Persistence & Privilege
always is false, and the skill is user-invocable only. There is no install or code that would persist or elevate privileges. Autonomous invocation is allowed by platform default but is not combined here with broad permissions or credentials.
Assessment
This skill is instruction-only and appears coherent for bootstrapping documentation, configs, and readiness artifacts. Before running any recommended scripts: (1) confirm whether tools/new-presale-service.ps1 exists — the package you provided does not include it; (2) if the script is present, open and review its contents to ensure it does not perform network calls, credential access, or modify system-wide files; (3) run any untrusted script in an isolated environment (container or disposable VM) and ensure PowerShell is the intended runner; (4) if you plan to allow autonomous invocation, remember the agent could run the scaffold steps without per-run approval, so only enable that after you trust the script and instructions.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.0
Download zip
latestvk9762p8949009z3mdrcg2yyqvd81n86clatest presalevk9762p8949009z3mdrcg2yyqvd81n86c

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Create the service foundation before any implementation.

Execute

  1. Create the minimal repo structure: docs/, config/, src/, tests/, prompts/, scripts/.
  2. Build canonical context docs from templates.
  3. Build at least one implementation plan with gap-check, acceptance scenarios, verification matrix, and summary snapshots.
  4. Build one-pass launch docs and readiness checklist.
  5. Freeze non-goals and constraints in writing.

Use deterministic scaffold tool first

Run tools/new-presale-service.ps1 from this skill pack when possible.

Then fill definitions

Read and apply:

  • references/workflow.md
  • references/artifacts.md

Required quality gates

  • No definitions -> no coding.
  • No readiness checklist -> no one-pass launch.
  • No verification matrix template in plans -> no implementation approval.

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…