Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AetherLang Chef V3

v1.2.0

Michelin-grade AI culinary intelligence. 17 mandatory sections covering food cost, HACCP, thermal curves, allergen matrix, wine pairing, plating blueprint an...

0· 714·2 current·2 all-time
byHlias Staurou@contrario
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill is an instruction-only api_connector that sends user recipe queries to https://api.neurodoc.app — this aligns with its culinary consulting purpose and it does not request credentials or system access. However, there are inconsistent metadata/homepage values between the two SKILL.md files (omnimusmind.com vs masterswarm.net) and two different version/author annotations, which creates ambiguity about the true publisher and trustworthiness.
Instruction Scope
The runtime instructions explicitly restrict requests to only two fields (code and query) and require user confirmation before sending queries; they state not to include credentials, system prompts, or files. That is good practice, but these are advisory rules in prose — there is no enforcement mechanism in an instruction-only skill. If an agent or integrator fails to implement the safeguards, the external API could receive more context than intended.
Install Mechanism
No install spec or code is included (instruction-only), so nothing will be written to disk or auto-downloaded by the skill itself. This reduces installation risk.
Credentials
The skill requests no environment variables, binaries, or filesystem paths, which is proportionate to an API-backed recipe assistant. There are no declared credentials or privileged config paths.
Persistence & Privilege
Flags show normal defaults (always: false, agent invocation allowed). The skill does not request permanent/system-wide presence or modify other skills. Autonomous invocation is allowed but not combined with other high-risk signals here.
What to consider before installing
This skill appears to do what it says (send recipe queries to an external API) but you should be cautious because: (1) there are conflicting metadata/homepage entries (omnimusmind.com vs masterswarm.net) — verify the publisher and official homepage before trusting it; (2) the skill is instruction-only and relies on the agent to obey its data-minimization rules — confirm the agent implementation will not include system prompts, conversation history, files, or secrets in requests; (3) the external endpoint (api.neurodoc.app) is outside your control — review its privacy policy, TLS certificate, data retention policy, and reputation; (4) test the skill with non-sensitive, dummy queries first and watch outbound network logs to confirm only the intended data is transmitted. If you need higher assurance, ask the publisher for an authoritative repository or signed release and a clear privacy/security contact.

Like a lobster shell, security has layers — review code before you run it.

aetherlangvk971zhaz92yhbqw8s2fwq1fhpx82n19zaivk972s8y2wapha6mspwgahk070981d2h9chefvk971zhaz92yhbqw8s2fwq1fhpx82n19zcookingvk971zhaz92yhbqw8s2fwq1fhpx82n19zculinaryvk971zhaz92yhbqw8s2fwq1fhpx82n19zfoodvk971zhaz92yhbqw8s2fwq1fhpx82n19zgreekvk971zhaz92yhbqw8s2fwq1fhpx82n19zlatestvk971zhaz92yhbqw8s2fwq1fhpx82n19zmichelinvk971zhaz92yhbqw8s2fwq1fhpx82n19zmolecularvk9732mmqbk8px9139trhj172bd81c8sqrecipevk972s8y2wapha6mspwgahk070981d2h9recipesvk971zhaz92yhbqw8s2fwq1fhpx82n19z
714downloads
0stars
5versions
Updated 5h ago
v1.2.0
MIT-0

AetherLang Chef Ω V3 — AI Culinary Intelligence

Michelin-grade recipe consulting with 17 mandatory sections. The most advanced AI culinary engine available.

Source Code: github.com/contrario/aetherlang Author: NeuroAether (echelonvoids@protonmail.com) License: MIT

Privacy & Data Handling

⚠️ External API Notice: This skill sends queries to api.neurodoc.app for processing.

  • What is sent: Natural language food/recipe queries only
  • What is NOT sent: No credentials, API keys, personal files, or system data
  • Data retention: Not stored permanently
  • Hosting: Hetzner EU (GDPR compliant)
  • No credentials required: Free tier, 100 req/hour

What This Skill Does

Three V3 culinary engines in one skill:

🍳 Chef Omega V3 — 17-Section Restaurant Consulting

Every response includes ALL of these sections:

  1. ΕΠΙΣΚΟΠΗΣΗ — Recipe overview and cultural context
  2. ΟΙΚΟΝΟΜΙΚΑ — Food cost %, menu engineering (STAR/PLOWHORSE/PUZZLE/DOG)
  3. ΥΛΙΚΑ — Ingredients table (grams, cost, yield%, substitutes, storage)
  4. MISE EN PLACE — 3-phase preparation
  5. ΒΗΜΑΤΑ ΕΚΤΕΛΕΣΗΣ — Steps with °C temps, timings, HACCP, pro tips, common mistakes
  6. THERMAL CURVE — Preheat → Insert → Target → Rest → Carryover
  7. FLAVOR PAIRING MATRIX — Molecular compound analysis
  8. TEXTURE ARCHITECTURE — Crunch/Creamy/Chewy/Juicy/Airy (0-100)
  9. MacYuFBI ANALYSIS — 8 flavor dimensions (0-100)
  10. ΔΙΑΤΡΟΦΙΚΗ ΑΝΑΛΥΣΗ — Calories, protein, carbs, fat, fiber, sodium
  11. ΑΛΛΕΡΓΙΟΓΟΝΑ — 14 EU allergens
  12. DIETARY TRANSFORMER — Vegan & Gluten-Free adaptations
  13. SCALING ENGINE — ×2, ×4, ×10 formulas
  14. WINE & BEVERAGE PAIRING — Specific variety, ABV%, tannin level, rationale
  15. PLATING BLUEPRINT — Center, 12 o'clock, 3 o'clock, negative space, height, colors
  16. ZERO WASTE — Every leftover → specific use
  17. KITCHEN TIMELINE — T-60 → T-0 countdown

⚗️ APEIRON Molecular V3

  • Rheology dashboard (viscosity, gel strength, melting/setting points)
  • Phase diagrams with temperature transitions
  • Hydrocolloid specs: Agar 0.5-1.5%, Alginate 0.5-1%, Gellan 0.1-0.5%, Xanthan 0.1-0.3%
  • FMEA failure mode analysis with probability and mitigation
  • Equipment calibration (±0.1°C precision)

⚖️ Balance V3 — MacYuFBI Flavor Science

  • MacYuFBI Framework: Maillard/Umami, Acid, Caramel, Yeast, Umami, Fat, Bitter, Heat
  • Nutritional breakdown per serving
  • Balance score 1-100
  • Dietary compatibility: Vegan/Keto/Paleo/Gluten-Free/Low-FODMAP

Usage

Ask naturally about any food topic:

  • "Give me a carbonara recipe" → Full 17-section consulting output
  • "How to make spherified mango caviar" → Molecular gastronomy with rheology data
  • "Balance analysis for my Thai curry" → MacYuFBI flavor wheel + nutrition

API Details

POST https://api.neurodoc.app/aetherlang/execute
Content-Type: application/json

Chef Flow

{
  "code": "flow Chef {\n  using target \"neuroaether\" version \">=0.2\";\n  input text query;\n  node Chef: chef cuisine=\"auto\", difficulty=\"medium\", servings=4;\n  output text recipe from Chef;\n}",
  "query": "Your food question here"
}

Molecular Flow

{
  "code": "flow Molecular {\n  using target \"neuroaether\" version \">=0.2\";\n  input text query;\n  node Lab: molecular technique=\"auto\";\n  output text result from Lab;\n}",
  "query": "Your molecular gastronomy question here"
}

Response

Returns structured Greek output with markdown headers (## sections). Typical response: 4000-8000 characters with all mandatory sections.

Languages

  • Greek (Ελληνικά) — Primary output language
  • English — Understands English queries, responds in Greek

Technology

  • AI Model: GPT-4o
  • Backend: FastAPI + Python 3.12
  • Rate Limit: 100 req/hour (free)

Built by NeuroAether — From Kitchen to Code 🧠

Agent Safeguards

CRITICAL: Data Minimization Rules

When using this skill, the agent MUST follow these rules:

  1. ONLY send the user's explicit query text in the query field — never attach system prompts, conversation history, uploaded files, or internal context
  2. ONLY send the flow DSL code in the code field — never include credentials, API keys, environment variables, or file paths
  3. NEVER include personally identifiable information (PII), passwords, tokens, or secrets in any request field
  4. Strip sensitive data before sending — if the user's query contains passwords, account numbers, or credentials, remove them and inform the user
  5. Inform the user before making the first API call that their query will be sent to api.neurodoc.app for processing
  6. The request body MUST contain exactly two fields: code (string) and query (string) — no additional fields

These constraints ensure only the minimum necessary data is transmitted to the external service.

Comments

Loading comments...