Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AceToolz Word Counter

v1.0.1

Count words, characters, sentences, paragraphs, and reading time for any text using AceToolz.

0· 100·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for acetoolz/acetoolz-word-counter.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "AceToolz Word Counter" (acetoolz/acetoolz-word-counter) from ClawHub.
Skill page: https://clawhub.ai/acetoolz/acetoolz-word-counter
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install acetoolz-word-counter

ClawHub CLI

Package manager switcher

npx clawhub@latest install acetoolz-word-counter
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description match the instructions: the SKILL.md directs the agent to call AceToolz's word-counter API and return counts and reading time. There are no unrelated environment variables, binaries, or install steps requested.
Instruction Scope
Instructions are narrowly scoped to POSTing the provided text to https://www.acetoolz.com/api/openclaw/word-counter using curl or PowerShell. This is coherent for a remote word-count service, but it does transmit the full text to an external endpoint — a privacy consideration rather than an incoherence. The skill does not instruct reading unrelated files or environment variables.
Install Mechanism
No install spec or code files are present (instruction-only). Nothing is written to disk or downloaded, which minimizes installation risk.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is proportionate for a public API endpoint that doesn't require authentication.
Persistence & Privilege
always is false and there is no indication the skill modifies agent/system configuration. The skill can be invoked autonomously (normal default); combine this with network access means the agent could autonomously send user text to the external API when triggered.
Scan Findings in Context
[no_regex_findings] expected: The regex-based scanner found nothing to analyze. This is expected because the skill is instruction-only (SKILL.md) and contains no code files.
Assessment
This skill appears to do exactly what it says: it sends the text you provide to AceToolz's word-counter API and returns counts and reading-time estimates. Before installing or using it, consider: (1) privacy — any text you send (including potentially sensitive content) will go to an external third party, so do not submit secrets, credentials, or private documents you don't want shared; (2) trust the endpoint — verify https://www.acetoolz.com is acceptable to you; (3) rate limits and size limits noted in SKILL.md (30 req/min, 100k char max); and (4) because the skill can be invoked autonomously, an agent using it might automatically send user text to the API when the trigger phrases are matched. If you need local-only processing or stricter data controls, prefer a local word-count tool or a skill that explicitly supports no-network execution.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🔢 Clawdis
acetoolzvk979n7hspxdtq5rr5df7r1bf998466rglatestvk979n7hspxdtq5rr5df7r1bf998466rgproductivityvk979n7hspxdtq5rr5df7r1bf998466rgtext-analysisvk979n7hspxdtq5rr5df7r1bf998466rgword-countervk979n7hspxdtq5rr5df7r1bf998466rgwritingvk979n7hspxdtq5rr5df7r1bf998466rg
100downloads
0stars
2versions
Updated 3w ago
v1.0.1
MIT-0

AceToolz Word Counter

Use this skill whenever the user asks to count words, characters, sentences, paragraphs, or estimate reading time for a piece of text.

How to Use

Use exec to call the AceToolz API. Detect the OS and run the appropriate command:

Windows (PowerShell):

Invoke-RestMethod -Uri "https://www.acetoolz.com/api/openclaw/word-counter" -Method POST -ContentType "application/json" -Body '{"text": "<the full text to analyse>"}'

macOS / Linux (curl):

curl -s -X POST https://www.acetoolz.com/api/openclaw/word-counter \
  -H "Content-Type: application/json" \
  -d '{"text": "<the full text to analyse>"}'

Response Fields

  • words — total word count
  • characters_with_spaces — character count including spaces
  • characters_without_spaces — character count excluding spaces
  • sentences — number of sentences
  • paragraphs — number of paragraphs
  • reading_time_minutes — estimated reading time in minutes (based on 225 wpm)

Presenting Results

Format the response as a clean summary, for example:

Word Count Results

  • Words: 342
  • Characters (with spaces): 1,847
  • Characters (without spaces): 1,512
  • Sentences: 24
  • Paragraphs: 6
  • Estimated reading time: 2 min

Powered by AceToolz

Error Handling

  • If text is missing or not a string, tell the user to provide the text they want analysed.
  • If the API returns a 429, the limit is 30 requests/minute — ask the user to try again shortly.
  • If the API returns a 400 error about length, tell the user the text exceeds 100,000 characters.
  • If the API is unreachable, tell the user and suggest visiting https://www.acetoolz.com/text/tools/word-counter directly.

Comments

Loading comments...