Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Fmt Tool

v1.0.0

Simple text formatting and reflow tool. Use for reformatting paragraphs, removing extra whitespace, and cleaning up text files.

0· 32·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dinghaibin/fmt-tool.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Fmt Tool" (dinghaibin/fmt-tool) from ClawHub.
Skill page: https://clawhub.ai/dinghaibin/fmt-tool
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install fmt-tool

ClawHub CLI

Package manager switcher

npx clawhub@latest install fmt-tool
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The description (text reformatting/reflow) matches what scripts/fmt.py actually does: it reads a file or stdin and calls textwrap.fill. However the SKILL.md documents options (-w, -u, -s), multiple files, and a default width of 75 — none of which the script implements. The core capability is coherent, but the user-facing contract is inaccurate.
!
Instruction Scope
SKILL.md instructs use of flags (-w, -u, -s) and multiple file arguments. The script ignores flags and only accepts an optional single filename as argv[1] and a width as argv[2] (positional integer). This mismatch can produce unexpected behavior (e.g., users passing '-w 80 file' will break). The script also uses open(sys.argv[1]) which will read any path the user supplies — expected for a formatter but worth noting.
Install Mechanism
Instruction-only install: no install spec and no external downloads. The script is included in the bundle and is small and readable; no high-risk installers or remote fetches are present.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The script performs only local file/stdin reads and text reflow — credentials or extra env access are not required.
Persistence & Privilege
The skill does not request always:true and has no special persistence or system-wide changes. It does not modify other skills or global agent settings.
What to consider before installing
This package is small and not obviously malicious, but it is inconsistent: SKILL.md promises CLI flags, multi-file support, and a default width of 75, while scripts/fmt.py only implements a simple positional interface and defaults to width 80. Before installing or invoking it in automation: (1) review or run the script on a harmless test file to confirm behavior; (2) fix or request the author to implement proper CLI parsing (argparse) or update SKILL.md to match the actual interface; (3) avoid running it on sensitive files until you confirm it behaves as expected. If you need the documented features (-w, -u, -s, multiple files), prefer a version that implements them or patch the script yourself.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bkpw7g4hkc19zfcjxrds06n85qn75
32downloads
0stars
1versions
Updated 4h ago
v1.0.0
MIT-0

Fmt - Text Reformatting Utility

Reformat paragraphs of text to a specified width, removing extra whitespace and producing clean, consistently formatted output.

Usage

fmt-tool [options] [file...]

Options

  • -w N: Set output width (default: 75)
  • -u: Uniform spacing (one space between words)
  • -s: Split long lines only (don't join short ones)

Examples

fmt-tool -w 80 messy.txt
fmt-tool -u notes.txt

Comments

Loading comments...