Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Schema Builder

Build database schemas with SQL generation and relationship modeling. Use when designing databases.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 250 · 2 current installs · 2 all-time installs
byBytesAgain2@ckchzh
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The declared purpose (database schema building) matches the included scripts: both scripts/schema.sh and scripts/script.sh produce schema designs, SQL, migrations, seeds and ER diagrams. Minor inconsistency: SKILL.md documents commands that call scripts/script.sh, while scripts/schema.sh contains additional commands (design, sql, migrate, seed, erd, etc.) that are not listed in SKILL.md. All functionality is still within the domain of schema generation.
Instruction Scope
SKILL.md instructs running scripts/script.sh and states data is stored in ~/.local/share/schema-builder. The scripts only create that directory and print/generated SQL/text; they do not read other system configuration or send data externally. Small issues: scripts/script.sh uses some unquoted shell variables (e.g., [ -f $2 ]) and echoes literal $2/$3 in single quotes (likely a bug), which are operational bugs but not secret-exfiltration behavior.
Install Mechanism
No install spec is present (instruction-only plus included scripts). No downloads, package installs, or archive extraction are performed by the skill bundle.
Credentials
The skill declares no required environment variables or credentials. The scripts use $HOME to create a local data directory (~/.local/share/schema-builder), which is proportional and expected for a local CLI-style tool.
Persistence & Privilege
always is false and the skill does not request elevated or persistent platform privileges. It only creates a directory within the user's home for storing its outputs; it does not modify other skills or system-wide config.
Assessment
This skill appears to be a local schema-generation utility and is internally consistent with its description. Before installing or permitting autonomous execution: 1) note that there are two scripts—script.sh (documented) and schema.sh (undocumented commands) — both generate text only and do not contact external servers; 2) the tool will create ~/.local/share/schema-builder for its outputs; 3) the shell scripts have minor quoting bugs (harmless but could produce incorrect output), so run them in an isolated environment (or inspect/patch them) if you plan to run on production systems; and 4) because the skill can be invoked autonomously by the agent, restrict autonomous execution if you are uncomfortable with any code running locally without supervision.

Like a lobster shell, security has layers — review code before you run it.

Current versionv3.0.0
Download zip
chinesevk97e3x95a29k5cgzgpyt1wc1bn82qxa6latestvk97dtaeqn56tc7t8qv6hhy1psn837t8hproductivityvk97e3x95a29k5cgzgpyt1wc1bn82qxa6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

schema-builder

Build database schemas with SQL generation and relationship modeling. Use when designing databases.

Commands

create

scripts/script.sh create <table cols>

alter

scripts/script.sh alter <table action col>

show

scripts/script.sh show <table>

export

scripts/script.sh export <format>

validate

scripts/script.sh validate <file>

er

scripts/script.sh er <t1 t2 relation>

Data Storage

Data stored in ~/.local/share/schema-builder/.


Powered by BytesAgain | bytesagain.com | hello@bytesagain.com

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…