Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Checkin

v0.1.0

提供各大App每日签到自动提醒、积分累计及价值兑换指引。

0· 221·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for mike47512/checkin.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Checkin" (mike47512/checkin) from ClawHub.
Skill page: https://clawhub.ai/mike47512/checkin
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install checkin

ClawHub CLI

Package manager switcher

npx clawhub@latest install checkin
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
Name/description promise automated daily check‑ins and points/ redemption guidance for apps, but SKILL.md content is about '签到汇总' as a product/price/logistics summary (filters, return fields, example queries) — these are different features. It's unclear which is the true purpose; required permissions (none) also don't match an automation that would need notification or account access.
!
Instruction Scope
SKILL.md contains only descriptive fields, example prompts, and UX notes; it does not provide runtime instructions to perform check‑ins, send notifications, access app APIs, or access user accounts. Conversely, it references data fields (logistics traces, order refund records) that would normally require access to user order data, but there are no instructions or declared creds for those actions.
Install Mechanism
Instruction‑only skill with no install spec and no code files. That minimizes on‑disk risk; nothing is downloaded or installed.
Credentials
The skill declares no required environment variables, credentials, or config paths. For the stated automated check‑in capability this is under‑privileged (missing notification/account access), and for the SKILL.md content it's proportionate because it doesn't instruct accessing external secrets.
Persistence & Privilege
Defaults are used (not always:true). The skill is user‑invocable and allows model invocation (normal). It doesn't request persistent system presence or modify other skills.
What to consider before installing
This skill is internally inconsistent: its description promises automated app check‑ins and points redemption but the SKILL.md reads like an e‑commerce product summary. Before installing, ask the publisher to clarify the intended functionality and provide a matching SKILL.md. Specifically verify: (1) if the skill will actually perform automated check‑ins, what credentials or notification permissions it needs and why; (2) whether it will access your accounts or orders (and where credentials are stored); and (3) who maintains the skill and whether a homepage or source repository exists. Because it's instruction‑only and requests no credentials, the immediate technical risk is low, but the mismatch could indicate sloppy or misleading metadata — avoid enabling it until you get a clear, matching description and runtime instructions.

Like a lobster shell, security has layers — review code before you run it.

latestvk973k9kkf81re3vg56dyheeg7n837cmv
221downloads
0stars
1versions
Updated 22h ago
v0.1.0
MIT-0

签到汇总

筛选项

  • 价格区间/折扣力度/历史最低价对比
  • 物流时效(次日达/即时配/预约送)
  • 评分与信任度(官方店/老牌店/评价基数)

返回字段

  • 实付金额/优惠明细/物流实施轨迹
  • 售后保障期/价保状态/退换货记录
  • 评价分布/真实买家秀/直播讲解回放

示例请求

  • “如何快速使用 签到汇总 处理 [具体场景任务] ?”
  • “签到汇总 的 [核心功能] 有哪些最新玩法/优惠信息?”

更新频率

  • 结合大促节奏、库存波段与社区评价每日动态调整

注意事项

  • 建议搜索优惠券后再下单;确认收货前务必查验商品完整性。

Comments

Loading comments...