Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Countries

v1.0.0

CLI for AI agents to lookup country info for their humans. Uses REST Countries API. No auth required.

0· 1.6k·2 current·2 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for jeffaf/countries.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Countries" (jeffaf/countries) from ClawHub.
Skill page: https://clawhub.ai/jeffaf/countries
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: bash, curl, jq, bc
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install countries

ClawHub CLI

Package manager switcher

npx clawhub@latest install countries
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (country info via REST Countries) aligns with required binaries (bash, curl, jq, bc) which are appropriate for a shell wrapper that queries a public REST API and formats JSON/numbers.
!
Instruction Scope
SKILL.md repeatedly instructs the agent to run a local wrapper (./countries -> scripts/countries) and shows CLI commands like `countries search ...`, but the packaged skill contains only README.md and SKILL.md — no executable or scripts are included. As packaged, the instructions reference files that don't exist, so the agent cannot follow them without fetching external code. The instructions do not ask for unrelated files, env vars, or credentials.
Install Mechanism
There is no install spec in the package (instruction-only). README suggests cloning https://github.com/jeffaf/countries-skill.git into a skills directory or symlinking a wrapper into PATH. That means to actually get a working CLI you must fetch and run code from a third-party GitHub repo — fetch execution is external to this package and should be inspected before running.
Credentials
No environment variables, credentials, or config paths are requested. This is proportional to the stated purpose (public REST API with no auth).
Persistence & Privilege
Skill is not always-enabled, and does not request persistent privileges or modify other skills. Autonomous invocation is enabled by default but not a special concern here on its own.
What to consider before installing
This package is documentation-only: it describes a CLI wrapper and shows how to use it, but does not include the wrapper script(s). To make the skill work you would need to clone or otherwise fetch the GitHub repo (https://github.com/jeffaf/countries-skill.git) and install/run its scripts. Before doing so: (1) inspect the repository contents and the specific wrapper/script files for unexpected network calls, credential access, or obfuscated code; (2) prefer running the documented curl/jq commands yourself rather than executing an unfamiliar wrapper; (3) ensure required binaries (bash, curl, jq, bc) are present; and (4) be cautious about blindly running install or setup commands from the repo. The mismatch between SKILL.md instructions and the packaged files is likely a packaging oversight, but it does require fetching external code — treat that as a security decision point.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🌍 Clawdis
Binsbash, curl, jq, bc
latestvk979pr8t216kp5yg9em42bmnyn80kghg
1.6kdownloads
0stars
1versions
Updated 17h ago
v1.0.0
MIT-0

Countries Lookup

CLI for AI agents to lookup country info for their humans. "What's the capital of Mongolia?" — now your agent can answer.

Uses REST Countries API (v3.1). No account or API key needed.

Usage

"Tell me about Japan"
"What countries are in South America?"
"Which country has Tokyo as capital?"
"Info on country code DE"

Commands

ActionCommand
Search by namecountries search "query"
Get detailscountries info <code>
List by regioncountries region <region>
Search by capitalcountries capital "city"
List allcountries all

Examples

countries search "united states"   # Find country by name
countries info US                  # Get full details by alpha-2 code
countries info USA                 # Also works with alpha-3
countries region europe            # All European countries
countries capital tokyo            # Find country by capital
countries all                      # List all countries (sorted)

Regions

Valid regions: africa, americas, asia, europe, oceania

Output

Search/list output:

[US] United States — Washington D.C., Americas, Pop: 331M, 🇺🇸

Info output:

🌍 Japan
   Official: Japan
   Code: JP / JPN / 392
   Capital: Tokyo
   Region: Asia — Eastern Asia
   Population: 125.8M
   Area: 377930 km²
   Languages: Japanese
   Currencies: Japanese yen (JPY)
   Timezones: UTC+09:00
   Borders: None (island/isolated)
   Driving: left side
   Flag: 🇯🇵

🗺️ Map: https://goo.gl/maps/...

Notes

  • Uses REST Countries API v3.1 (restcountries.com)
  • No authentication or rate limits
  • Country codes: alpha-2 (US), alpha-3 (USA), or numeric (840)
  • Population formatted with K/M/B suffixes
  • All regions lowercase

Agent Implementation Notes

Script location: {skill_folder}/countries (wrapper to scripts/countries)

When user asks about countries:

  1. Run ./countries search "name" to find country code
  2. Run ./countries info <code> for full details
  3. Run ./countries region <region> for regional lists
  4. Run ./countries capital "city" to find by capital

Common patterns:

  • "What country is X in?" → search by name
  • "Tell me about X" → search, then info with code
  • "Countries in Europe" → region europe
  • "Capital of X" → info with code, check capital field
  • "What country has capital X?" → capital search

Don't use for: Historical countries, disputed territories, non-sovereign regions.

Comments

Loading comments...