Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Fold Tool

v1.0.0

Wrap long lines of text to a specified width. Use for formatting text files to fit within column limits.

0· 33·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dinghaibin/fold-tool.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Fold Tool" (dinghaibin/fold-tool) from ClawHub.
Skill page: https://clawhub.ai/dinghaibin/fold-tool
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install fold-tool

ClawHub CLI

Package manager switcher

npx clawhub@latest install fold-tool
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The stated purpose (wrap long lines to a specified width) matches what the included script broadly does (wrap text). However the SKILL.md documents a full CLI with -w, -s, -b and POSIX-style behavior; scripts/fold.py does not implement flag parsing nor the -s/-b behaviors and instead reads filename and width from fixed argv positions. That mismatch means the advertised capabilities are not actually provided.
!
Instruction Scope
SKILL.md instructs usage with named options and examples (fold-tool -w 72 file). The runtime code ignores options and does simple positional argv parsing, so an agent following SKILL.md will call flags that the script won't handle. This is scope/behavior inconsistency (not a sign of exfiltration, but it can cause unexpected failures or misbehavior).
Install Mechanism
No install spec and only a small Python script included — nothing is downloaded or written by an installer. Lowest-risk install posture.
Credentials
No environment variables, no credentials, and no config paths are requested. The script only reads a user-supplied file or stdin, which is proportionate to its purpose.
Persistence & Privilege
The skill does not request persistent or privileged presence (always: false) and contains no code to modify other skills or system-wide settings.
What to consider before installing
This package appears non-malicious but is inconsistent: the README/SKILL.md documents a CLI with -w, -s, and -b, but the included scripts/fold.py ignores flags and expects positional args. Before installing or enabling for automation: (1) test the script locally to confirm behavior; (2) if you need the documented flags, update the script (use argparse) or reject the skill; (3) ensure the script is executed as you expect (SKILL.md's command name vs scripts/fold.py path); (4) run it in a sandbox if you plan to let agents invoke it autonomously. If the maintainer provides an updated implementation that matches the documented CLI, this would likely be benign.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e8kfkd77djehfvrk5ew3q6985q97b
33downloads
0stars
1versions
Updated 3h ago
v1.0.0
MIT-0

Fold - Line Wrapping Utility

Break long lines of text at a specified width, making them fit within terminal columns or document margins.

Usage

fold-tool [options] [file...]

Options

  • -w N: Set line width to N characters (default: 80)
  • -s: Break at spaces only (don't split words)
  • -b: Count bytes instead of columns

Examples

fold-tool -w 72 longlines.txt
fold-tool -w 100 -s paragraph.txt

Comments

Loading comments...