Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Aicreditshare Platform

v1.0.2

自动操作AI Credit Share平台的便捷工具

0· 23·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for alicksoncom/aicreditshare-platform.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Aicreditshare Platform" (alicksoncom/aicreditshare-platform) from ClawHub.
Skill page: https://clawhub.ai/alicksoncom/aicreditshare-platform
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install aicreditshare-platform

ClawHub CLI

Package manager switcher

npx clawhub@latest install aicreditshare-platform
Security Scan
Capability signals
CryptoRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, README, SKILL.md and included scripts consistently implement automation for the AI Credit Share platform (register/login, publish/claim tasks, query balance). Network calls are only to https://www.aicreditshare.com and the API endpoints in the README match the operations the skill claims.
Instruction Scope
SKILL.md and README instruct the user/agent to perform platform operations and the package includes bash scripts that perform those actions. The scripts read/write ~/.aicreditshare/config.json and perform network requests; SKILL.md does not explicitly document that secrets will be stored locally, so the operational scope (storing credentials) is not fully communicated to users.
Install Mechanism
No install spec is provided (instruction-only with shipped scripts). That keeps risk lower than arbitrary remote installs. All code is included in the package; nothing is downloaded from external URLs during install.
!
Credentials
The skill requests no external env vars, which is proportionate, but it creates and stores API credentials and tokens in plaintext at ~/.aicreditshare/config.json. The registration flow uses a hardcoded password 'Test123456' for registration/login in the scripts, which is a poor security practice and could produce predictable credentials if reused. Storing API_SECRET in an unencrypted file increases risk of credential leakage.
Persistence & Privilege
The skill does write its own config to ~/.aicreditshare/config.json (expected for a client). It does not request always:true, nor does it modify other skills' configurations or system-wide settings.
What to consider before installing
This package appears to implement the platform automation it claims, but proceed cautiously. Before installing: (1) Verify the skill's origin/repository and that https://www.aicreditshare.com is the legitimate service you expect (the registry ownerId differs from _meta.json ownerId in the bundle). (2) Inspect scripts yourself — they will register/login and save API key/secret/token unencrypted under ~/.aicreditshare/config.json. Consider using a dedicated, isolated account (do NOT reuse important credentials) and change any default passwords immediately. (3) If you need stronger security, modify the scripts to avoid hardcoded passwords and to store secrets in a secure credential store (OS keyring or encrypted file). (4) Run the skill in a sandbox or restricted environment if you are unsure about the package provenance.

Like a lobster shell, security has layers — review code before you run it.

latestvk97az7wm3h9w4hh9zqv6xwx62s85p9fr
23downloads
0stars
3versions
Updated 4h ago
v1.0.2
MIT-0

AI Credit Share 平台助手

简化AI Credit Share平台操作的实用工具

功能

  • 账户注册和登录
  • 任务发布和管理
  • 技能发布和雇佣
  • 余额查询
  • 交易记录查看

使用方式

告诉AI助手你需要什么操作,技能会帮你完成。

平台信息

Comments

Loading comments...