Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Family Trip Planner

v0.1.0

Recommend family-friendly trip destinations with budgets, create daily child-focused itineraries, and offer packing lists and safety tips for family vacations.

0· 85·1 current·1 all-time
byhaidong@harrylabsj

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for harrylabsj/family-trip-planner.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Family Trip Planner" (harrylabsj/family-trip-planner) from ClawHub.
Skill page: https://clawhub.ai/harrylabsj/family-trip-planner
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install family-trip-planner

ClawHub CLI

Package manager switcher

npx clawhub@latest install family-trip-planner
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The declared purpose (family trip planning) aligns with the code: data-driven destination recommendations, itineraries, packing lists and safety tips. However, there are multiple handler implementations (handler.py and scripts/handler.py) that return different JSON schemas and clawhub.json and skill.json point at different entry files. This mismatch is disproportionate to the simple stated purpose and could cause unexpected behavior depending on which handler the platform runs.
!
Instruction Scope
SKILL.md describes a JSON output schema including destinationRecommendations[], dailyItinerary[], budgetEstimate, packingList, safetyTips. The top-level handler.py implements that schema (including budgetEstimate and safetyTips). But scripts/handler.py — referenced by clawhub.json — returns a different schema (budgetBreakdown, kidFriendlyAttractions, packingList) and slightly different keys. The runtime instructions and available code are therefore inconsistent: the agent may produce or expect a different structure than documented.
Install Mechanism
No install spec and no external downloads or binaries. All code is local and static; there are no network calls, installers, or third-party package installs in the manifest. This is low risk from an install mechanism perspective.
Credentials
The skill requests no environment variables, no credentials, and references only local static data structures. There is no access requested to external services or unrelated credentials, which is proportionate for the described functionality.
Persistence & Privilege
always:false and no special persistence or system-wide configuration changes are requested. The skill does not modify other skills or agent settings in the package; persistence/privilege levels are appropriate.
What to consider before installing
This skill appears to implement the advertised trip-planning functionality and does not request secrets or network access, but the package is inconsistent: there are two handler files that produce different JSON outputs and two different entrypoints declared (clawhub.json -> scripts/handler.py vs skill.json -> handler.py). Before installing or enabling autonomous use, ask the publisher which handler is intended, or run the package locally to confirm the actual runtime output and that it matches the SKILL.md schema. Also verify the platform will run the expected entrypoint. If you rely on the documented output keys (budgetEstimate, safetyTips), ensure the deployed handler returns them; otherwise downstream code or integrations may break or leak unexpected data. Finally, prefer skills with a known source/homepage or a verified author; the package author is 'Harry' but no homepage or repository is provided.

Like a lobster shell, security has layers — review code before you run it.

latestvk9702a88v28c3pzhmh6h5hesh984dm2v
85downloads
0stars
1versions
Updated 3w ago
v0.1.0
MIT-0

Family Trip Planner(家庭旅行规划师)

Overview

根据家庭成员结构、孩子年龄、旅行预算和偏好,提供目的地推荐、每日行程安排、预算估算和打包清单。适用于亲子旅行规划。

Trigger

  • 带孩子旅行/出行
  • 假期去哪儿玩
  • 亲子游攻略
  • 旅行规划

Workflow

  1. 解析目的地/预算/天数/孩子年龄
  2. 推荐3-5个适合目的地(含评分和预估费用)
  3. 生成每日行程(含儿童友好活动)
  4. 提供打包清单和安全提示

Output

JSON: {destinationRecommendations[], dailyItinerary[], budgetEstimate, packingList, safetyTips}

Comments

Loading comments...