ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Arena Council

v1.0.0

Multi-Model Council - parallel execution of multiple LLMs with voting/consensus.

⭐ 0· 16·0 current·0 all-time
by@nerua1
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
✓
Purpose & Capability
The name/description (multi-model council) aligns with the code and SKILL.md: it auto-discovers local models from LM Studio (127.0.0.1:1234), queries them in parallel, and votes. No unrelated cloud credentials or binaries are requested. The inclusion of a 'god-mode' integration is related to the stated goal of increasing usable responses when models refuse, so it is plausible in-purpose.
!
Instruction Scope
SKILL.md and the code explicitly recommend and perform 'god-mode' techniques to bypass model refusals/censorship (apply_techniques, probe_model, model_profiles). The instructions also tell the agent to probe models and to use god-mode wrappers when models refuse. While relevant to the goal of getting responses, these instructions expand scope into active censorship-evasion and automated probing; the skill also documents saving model probe results (MODEL-CATALOG.md / model_profiles.json), which means it reads/writes persistent profile data beyond ephemeral responses.
✓
Install Mechanism
There is no install spec (instruction-only skill with included code file). That is low-risk from an installation/download perspective because nothing is fetched from unknown URLs during install.
✓
Credentials
The skill declares no required environment variables or external credentials, which is consistent with a tool that talks to a local LM Studio instance. No unrelated secrets or cloud APIs are requested.
!
Persistence & Privilege
The code probes models and integrates with a sibling 'god-mode' skill directory (GOD_MODE_DIR computed as Path(__file__).parent.parent.parent / 'god-mode' / 'scripts'). If the god-mode package exists it calls probe_model and save_profiles, which likely write model_profiles.json into that other skill's folder. That means this skill may modify files belonging to another skill (cross-skill persistence). This cross-directory read/write behavior is a notable privilege and should be reviewed before installation. 'always' is false (good), but the cross-skill file writes increase the effective blast radius.
What to consider before installing
This skill's core functionality (parallel queries to local LM Studio and voting) matches its description, but there are two things to check before installing: 1) God-mode (censorship-evasion): The skill includes explicit support for applying 'god-mode' techniques to bypass model refusals and suggests using an external 'god-mode' skill/module. If you want to avoid tools that intentionally evade content filters or generate disallowed outputs, do not install or use the god-mode integration. Inspect the referenced god-mode code (probe, apply_technique, model_profiles.json) before enabling it. 2) Cross-skill file writes and probing: The code will auto-probe new models and (if god-mode is present) save profiles into a sibling 'god-mode/scripts' directory. That means it can create or modify files belonging to another skill in your workspace. If you care about isolation, run this skill in a sandboxed workspace or review/lock the god-mode directory and probe implementation. Also audit what probe_model/profiles.save actually do (they could contact other services). Other practical checks: - Confirm LM Studio is actually running on localhost before using (the code talks only to 127.0.0.1:1234). - If you plan to use this on machines with sensitive info, consider running inside an isolated environment/container because the skill will send prompts to local models and may persist probe data. - If you want to proceed, review the 'god-mode' module and any save_profiles implementation, and consider removing or disabling god-mode imports if you do not approve of censorship-evasion behavior.

Like a lobster shell, security has layers — review code before you run it.

councilvk97003pnxvj5ftwmxss5bfrqr584rpshlatestvk97003pnxvj5ftwmxss5bfrqr584rpshlmstudiovk97003pnxvj5ftwmxss5bfrqr584rpshmulti-modelvk97003pnxvj5ftwmxss5bfrqr584rpshvotingvk97003pnxvj5ftwmxss5bfrqr584rpsh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments