Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

TypeScript Config Generator

生成专业的 TypeScript 配置,支持严格模式、React、Node.js、Webpack 等多种场景,一键生成最佳实践配置。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 253 · 1 current installs · 1 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The SKILL.md advertises multiple presets (strict, node, react, minimal, library), CLI flags (--output, --target) and richly commented configs, but the shipped typescript-config-generator.sh only accepts a single positional preset (default 'strict'), only toggles the 'strict' compiler option, and always writes a minimal tsconfig.json to the current directory. The declared purpose (multi-scenario generator) is not matched by the actual implementation.
Instruction Scope
The instructions tell users to run a CLI with many options; those options are not implemented in the script. The SKILL.md does not instruct reading unrelated files or secrets. However the runtime behavior (the script) will overwrite tsconfig.json in the current directory without prompting or backup — this is a scope/behavior mismatch and a safety concern for users' repo files.
Install Mechanism
No install spec and no network downloads — lowest installer risk. The skill is instruction-only with a small local shell script; nothing is fetched from external URLs.
Credentials
The skill requests no environment variables, no credentials, and no config paths. There is no evidence of unnecessary credential access or exfiltration.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills. It has normal, non-privileged presence.
What to consider before installing
This skill is inconsistent: the README promises many presets and flags that the actual shell script does not implement. The script will overwrite tsconfig.json in the current directory (no backup) and only toggles 'strict' true/false. Before installing or running it: (1) inspect the script (it's short) and consider running it in an empty/test directory; (2) back up any existing tsconfig.json; (3) if you need real multi-scenario configs, either expand the script yourself or use a more fully implemented tool from a known source; (4) if you plan to let an agent invoke this autonomously, be aware it could overwrite repository files — only enable if you trust the source or have repository backups.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
configvk978a0p3zmxcmwzyzw9xcqjq71825tz2generatorvk978a0p3zmxcmwzyzw9xcqjq71825tz2latestvk978a0p3zmxcmwzyzw9xcqjq71825tz2tsconfigvk978a0p3zmxcmwzyzw9xcqjq71825tz2typescriptvk978a0p3zmxcmwzyzw9xcqjq71825tz2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📘 Clawdis

SKILL.md

TypeScript Config Generator

生成专业的 TypeScript 配置文件,适用于各种项目场景。

功能

  • ⚡ 一键生成配置
  • 🎯 多种场景预设
  • 🔧 严格类型检查
  • 📝 完整注释

预设

预设说明适用场景
strict严格模式生产项目
nodeNode.js后端服务
reactReact前端应用
minimal最小配置快速原型
library类库npm 包

使用方法

基本用法

# 严格模式
typescript-config-generator --preset strict

# Node.js 项目
typescript-config-generator --preset node

# React 项目
typescript-config-generator --preset react

选项

选项说明
--preset, -p预设类型
--output, -o输出文件
--target编译目标

严格模式配置

{
  "compilerOptions": {
    "strict": true,
    "noImplicitAny": true,
    "strictNullChecks": true,
    "noUnusedLocals": true,
    "noUnusedParameters": true
  }
}

安装

npm install -g typescript
tsc --init

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…