Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The registry description says the skill provides Chicago travel information (sights, food, transport, weather, sports), but the SKILL.md describes 'chicago' as a brand profile tool (founding background, products, global business layout, industry analysis). This mismatch means the declared purpose does not align with what the skill actually instructs the agent to do.
Instruction Scope
SKILL.md is short and narrowly scoped: it triggers when the user mentions 'chicago' and instructs the agent to provide structured background/brand information and cite official/industry sources. It does not request files, credentials, or external endpoints beyond general 'data sources' guidance. The main issue is that the instructions implement a different domain (brand analysis) than the public description (city/travel guide).
Install Mechanism
Instruction-only skill with no install steps and no code files. This minimizes risk from install-time downloads or filesystem writes.
Credentials
The skill requests no environment variables, no credentials, and no config paths — its declared requirements are minimal and proportional to a read-only information skill.
Persistence & Privilege
always is false, autonomous invocation is allowed (platform default). The skill does not request elevated or persistent privileges.
What to consider before installing
Do not assume this skill will deliver travel guides because its runtime instructions implement brand/company profile content. Before installing, ask the publisher to clarify the intended purpose and to fix the mismatch between the public description and SKILL.md. Because it has no installs or credential requests, it’s low-risk technically, but it may behave differently from expectations (returning corporate background instead of tourism info). If you need travel information, prefer a skill whose SKILL.md explicitly covers travel content and cites reliable data sources; if you proceed with this skill, test it carefully and consider disabling autonomous invocation until you confirm its behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk976ysajqd36k57d2q40j1jt5184w182
License
MIT-0
Free to use, modify, and redistribute. No attribution required.