ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Champions League Ucl

v1.0.5

提供欧洲冠军联赛参赛球队、赛程、比分、球员信息及相关新闻的查询服务。

⭐ 0· 70·0 current·1 all-time
by@hanxueyuan
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
Name/description promise live sports data (teams, schedule, scores, players, news), but the SKILL.md contains only a generic brand-profile template with no API endpoints, data sources, scraping instructions, or credentials. The declared capabilities do not match the actual required resources or instructions.
!
Instruction Scope
SKILL.md's runtime instructions are limited to a static 'brand profile' and 'read_when' triggers. They do not instruct the agent to call any external service, parse any feed, or obtain real-time match information; they also do not reference any files, env vars, or endpoints needed for the described functionality.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk (nothing is written to disk or downloaded).
✓
Credentials
No environment variables, credentials, or config paths are requested; nothing disproportionate is being asked from the environment.
✓
Persistence & Privilege
always:false and default invocation flags — the skill does not request elevated or persistent platform privileges.
What to consider before installing
This skill is functionally misleading: it advertises delivering Champions League data but provides only a static brand-profile template and no way to get live scores or team details. It's low-risk to install from a system perspective (no installs or credentials), but it likely won't do what you expect. Before installing, ask the publisher for: (1) concrete data sources or APIs they will call, (2) update frequency and how live scores are obtained, and (3) a homepage or contact. If you need real-time scores or player stats, prefer skills or services that cite known APIs (official UEFA API, sportsdata.io, etc.) or document their data sources.

Like a lobster shell, security has layers — review code before you run it.

latestvk979twtgr7ekbeznabgnqnf5p184wrey

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments