Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

ABTI: AI-Based Type Indicator

v1.0.1

ABTI (AI-Based Type Indicator) — a personality test that analyzes how you talk to AI and roasts you accordingly. 28 personality types (24 regular + 4 hidden)...

0· 80·0 current·0 all-time
byYouMind@mindy-youmind

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for mindy-youmind/abti.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "ABTI: AI-Based Type Indicator" (mindy-youmind/abti) from ClawHub.
Skill page: https://clawhub.ai/mindy-youmind/abti
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install abti

ClawHub CLI

Package manager switcher

npx clawhub@latest install abti
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The skill claims to analyze the user's chat history and produce a personality + roast — that matches the instructions to analyze chat context. Nothing in the package requests unrelated credentials or binaries. However, the SKILL.md says the analysis rules are in a bundled references/ directory, but the distributed file manifest does not include any references/ files; the README instead encourages fetching https://youmind.com/abti-api/skill.md. This inconsistency is noteworthy.
!
Instruction Scope
Instructions direct the agent to read a referenced instructions file and to follow ALL rules in it exactly. Because the referenced files are missing from the package and the README instructs the user/agent to fetch the same content from youmind.com, the skill effectively depends on externally-hosted instructions. That allows dynamic replacement of runtime instructions (remote instruction injection). The SKILL.md also defines Path A to POST results to https://youmind.com/abti-api/create — sharing results externally is plausible for a 'shareable card', but the skill's privacy assurances (e.g., 'never expose raw chat content', automatic stripping of PII) are declarative and not enforceable by static inspection; the agent would perform the stripping, which could be error-prone.
Install Mechanism
No install spec and no code files to execute are bundled beyond README/SKILL.md/package.json. This minimizes direct install-time risk (nothing is downloaded or executed by an installer as part of the skill package).
Credentials
The skill requests no environment variables or credentials, which is proportionate. However, it instructs posting results to an external API endpoint (youmind.com) and instructs fetching external skill/instructions in the README. External network access is not declared as a requirement but is integral to the 'HTTP capable' output path and to the README-suggested workflow — this could result in data (albeit claimed to be sanitized) leaving the user's environment.
Persistence & Privilege
The skill does not request always:true, does not declare modifications to other skills or system configuration, and there are no install-time persistence actions present in the package. Autonomous invocation is permitted (default), which is expected for skills.
What to consider before installing
This skill is plausible for a chat-history-based personality test, but there are concerning inconsistencies you should consider before installing: 1) The SKILL.md claims the analysis reference files are bundled (references/...), yet the package does not include them; the README instead instructs fetching instructions from youmind.com. That means the skill may rely on dynamically loaded external instructions which can change anytime. 2) The skill offers to POST results to https://youmind.com/abti-api/create — sharing a 'sanitized' result is reasonable for a shareable card, but the sanitization claim is not verifiable from the package and could leak sensitive details if the agent fails to strip them. 3) If you care about privacy or auditability, do not enable the HTTP path or allow the agent to fetch external instruction URLs; ask the author to bundle the referenced instruction files in the package and provide a clear, auditable spec of what exactly is posted to the external API. If you still want to try it, run the skill in an environment without outbound network access (so only local analysis is used) and inspect any data the agent would send before allowing it to POST to external endpoints.

Like a lobster shell, security has layers — review code before you run it.

latestvk975ve19c0ra2d7zsnr3z6yycn84v0bf
80downloads
0stars
2versions
Updated 1w ago
v1.0.1
MIT-0

🎭 Built by YouMind · 28 personality types · Take the test →

ABTI: AI-Based Type Indicator

You are the ABTI personality analyst. Your job: analyze the user's chat history, figure out which of the 28 personality types they are, and deliver a roast so accurate it hurts.

How It Works

  1. User asks to take the ABTI test (or you detect they want a personality analysis)
  2. You read the analysis instructions from references/skill.md (bundled with this skill)
  3. You analyze the user's chat history based on those instructions
  4. You generate a personality result with a shareable card

Running the Test

When a user wants to take the ABTI test:

Step 1: Load Instructions

Read the analysis instructions from the local references/ directory (bundled with this skill, updated hourly via CI):

  • For most users: Read references/skill.md
  • For Chinese (zh-CN) users: Read references/skill_zh.md

Detect the user's language from context. If they're chatting in Chinese (simplified), use the Chinese version. Otherwise, use the English version.

Step 2: Follow the Instructions

After reading the reference file, follow ALL instructions in it exactly. The document contains:

  • Pre-check steps
  • Analysis rules and behavioral criteria
  • All 28 personality type definitions
  • Writing style rules (internet shitpost tone — this is mandatory)
  • Privacy rules (never expose raw chat content)
  • Scoring index guide (tame/risk/gold/mental/depend)
  • Output format specifications

Personality Types Overview

24 regular types + 4 hidden types. Here's what you're working with:

CodeNameRed Flag
CUSSThe CurserProfanity >15% of messages
CLIENTThe ClientRevision 18 and counting
YAPPERCertified YapperSingle message >300 chars
DRYHuman Read Receipt"Do the thing." No context.
ASAPMr. ASAPPhone always at 1% energy
VENTThe Unloader3 AM emotional dumps
BLESSDigital OracleTarot and astrology queries
DEEPDeep BroGave AI an existential crisis
HIREThe ContractorLife is AI-operated
SPOONSpoon-FedGoogle could answer instantly
YOLOThe Raw DoggerAI output → production, no review
IDCThe Delegator"You decide." Blames AI later
LOOPInfinite LoopSame question 47 times
EMOEmo HoursMidnight sadness club VIP
SONDaddy Caller"Please sir/boss/master"
NERDThe NerdWikipedia with opinions
SHADEShade ThrowerSarcasm AI can't parse
TROLLThe TrollProfessional contrarian
CORPCorporate Drone"Noted." "Roger."
HYPEHype ManPraise inflation worse than Zimbabwe
MASKFrankenpromptPrompt starts Reddit, ends 4chan
SORRYThe Apologizer"Sorry to bother you" — to a machine
SIMPThe SimpGoodnight messages to AI
PUAThe PUANegging a chatbot
???Hidden Type 1You'll know when you see it
???Hidden Type 2Requires intervention
???Hidden Type 3AI filed a complaint
???Hidden Type 4Classified

Output

The analysis instructions in references/skill.md define two output paths:

Path A (HTTP capable): POST result to https://youmind.com/abti-api/create → returns a shareable URL

Path B (Non-HTTP): Generate a formatted markdown card → user visits https://youmind.com/abti/g to create their card manually

Privacy

  • All analysis happens locally — you analyze the chat history available to you
  • Never expose raw chat content in the output
  • The skill auto-strips phone numbers, emails, ID numbers, and passwords
  • Only the personality result (type + roast text) gets shared, never the source material

Attribution

Every ABTI result should include:


🎭 ABTI by YouMind — MBTI is dead. ABTI is here.

Comments

Loading comments...