Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

CLI-Anything for OpenClaw

v1.0.0

Use when the user wants OpenClaw to build, refine, test, or validate a CLI-Anything harness for a GUI application or source repository. Adapts the CLI-Anythi...

0· 82·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for chensu1234/chensu-cli-anything.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "CLI-Anything for OpenClaw" (chensu1234/chensu-cli-anything) from ClawHub.
Skill page: https://clawhub.ai/chensu1234/chensu-cli-anything
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install chensu-cli-anything

ClawHub CLI

Package manager switcher

npx clawhub@latest install chensu-cli-anything
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the SKILL.md. The skill expects a local source path or GitHub URL and describes producing a Python Click-based harness, testing, and packaging — all coherent with its declared purpose. It does not request unrelated credentials, binaries, or config paths.
Instruction Scope
Instructions are focused on analyzing source trees, generating harness files, running tests, and validating installation. They explicitly recommend running 'pip install -e .' and executing the built CLI (e.g., via subprocess). This is expected for a harness builder but means the agent will execute code from the target repository at runtime — review or sandbox untrusted repos before running.
Install Mechanism
No install spec or code files are included (instruction-only), so nothing will be written or installed by the skill itself. Lowest-risk install surface from the skill bundle.
Credentials
The skill declares no required environment variables, credentials, or config paths. The SKILL.md does not reference hidden env vars. Requested permissions are proportional to the stated task.
Persistence & Privilege
always: false and no special persistence or privileges requested. The skill does not modify other skills or agent-wide settings.
Assessment
This skill appears coherent for generating and testing Python CLI harnesses. Practical cautions: the runtime workflow expects the agent to acquire source code, run tests, and perform 'pip install -e .' and subprocess calls against the target project's CLI — actions that execute code from the target repository. If the repository is untrusted, run these steps in an isolated environment (container, VM, sandbox), or manually review the code before allowing execution. Because the skill is instruction-only, there is no bundled install to inspect further; if you want higher assurance, provide a sample repository or request a dry-run that only outputs planned file changes rather than running installs/tests.

Like a lobster shell, security has layers — review code before you run it.

automationvk976happp49by7fsshaatfhwq984j0ggbuildervk976happp49by7fsshaatfhwq984j0ggclivk976happp49by7fsshaatfhwq984j0gglatestvk976happp49by7fsshaatfhwq984j0gg
82downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

CLI-Anything for OpenClaw

Use this skill when the user wants OpenClaw to act like the CLI-Anything builder.

If this skill is being used from inside the CLI-Anything repository, read ../cli-anything-plugin/HARNESS.md before implementation. That file is the full methodology source of truth. If it is not available, follow the condensed rules below.

Inputs

Accept either:

  • A local source path such as ./gimp or /path/to/software
  • A GitHub repository URL

Derive the software name from the local directory name after cloning if needed.

Modes

Build

Use when the user wants a new harness.

Produce this structure:

<software>/
└── agent-harness/
    ├── <SOFTWARE>.md
    ├── setup.py
    └── cli_anything/
        └── <software>/
            ├── README.md
            ├── __init__.py
            ├── __main__.py
            ├── <software>_cli.py
            ├── core/
            ├── utils/
            └── tests/

Implement a stateful Click CLI with:

  • one-shot subcommands
  • REPL mode as the default when no subcommand is given
  • --json machine-readable output
  • session state with undo/redo where the target software supports it

Refine

Use when the harness already exists.

First inventory current commands and tests, then do gap analysis against the target software. Prefer:

  • high-impact missing features
  • easy wrappers around existing backend APIs or CLIs
  • additions that compose well with existing commands

Do not remove existing commands unless the user explicitly asks for a breaking change.

Test

Plan tests before writing them. Keep both:

  • test_core.py for unit coverage
  • test_full_e2e.py for workflow and backend validation

When possible, test the installed command via subprocess using cli-anything-<software> rather than only module imports.

Validate

Check that the harness:

  • uses the cli_anything.<software> namespace package layout
  • has an installable setup.py entry point
  • supports JSON output
  • has a REPL default path
  • documents usage and tests

Backend Rules

Prefer the real software backend over reimplementation. Wrap the actual executable or scripting interface in utils/<software>_backend.py when possible. Use synthetic reimplementation only when the project explicitly requires it or no viable native backend exists.

Packaging Rules

  • Use find_namespace_packages(include=["cli_anything.*"])
  • Keep cli_anything/ as a namespace package without a top-level __init__.py
  • Expose cli-anything-<software> through console_scripts

Workflow

  1. Acquire the source tree locally.
  2. Analyze architecture, data model, existing CLIs, and GUI-to-API mappings.
  3. Design command groups and state model.
  4. Implement the harness.
  5. Write TEST.md, then tests, then run them.
  6. Update README usage docs.
  7. Verify local installation with pip install -e .

Output Expectations

When reporting progress or final results, include:

  • target software and source path
  • files added or changed
  • validation commands run
  • open risks or backend limitations

Comments

Loading comments...