Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The published description (human-rights reports, help participating in prisoner rescue and abolition campaigns) does not match the SKILL.md, which describes 'amnesty' as an industry brand with 'products', 'market layout' and 'market analysis'. That divergence suggests the skill may be mislabeled or repurposed; it's unclear whether it actually contains content relevant to Amnesty International or human-rights activism.
Instruction Scope
SKILL.md is short, instruction-only, and does not request credentials, run commands, or access files — which is low technical risk. However the instructions are vague (generic research/summary tasks) and include a different framing (market/product focus) than the skill description, giving the agent broad ambiguity about what to present to users.
Install Mechanism
No install spec and no code files are present; this is an instruction-only skill so nothing is written to disk and no external packages are fetched.
Credentials
The skill declares no required environment variables, no credentials, and no config paths — its requested access is minimal and proportionate to an information-only skill.
Persistence & Privilege
always is false and the skill does not request elevated or persistent privileges. Autonomous invocation is allowed by default but is not combined with other high-risk indicators here.
What to consider before installing
This skill has no installable code and asks for no secrets, so technical risk is low — but there are important content mismatches and provenance gaps. Before installing, consider: 1) The SKILL.md describes 'amnesty' as a commercial brand and mentions products/market analysis, which does not align with an Amnesty International human-rights help skill. 2) The source and homepage are unknown; there is no publisher provenance or contact. 3) Version in SKILL.md (1.0.4) differs from registry metadata (1.0.3), a sign of sloppy publication. If you need reliable Amnesty International information or ways to participate in campaigns, prefer official sources (amnesty.org) or skills clearly published by known organizations. If you still want this skill, ask the publisher for clarification of its purpose and source, and only enable it with limited agent privileges until you verify content quality.Like a lobster shell, security has layers — review code before you run it.
latestvk97e1hyt2cvg6f2xg02sfbqd0984x9mv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.