Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

folder-counter

v1.0.0

统计指定文件夹下的文件数量和文件类型分布。当用户需要了解某个目录包含多少文件、或者在建立索引前需要评估文件规模时使用。触发场景:「帮我数一下这个文件夹有多少文件」「这个目录有多少东西」「统计一下这个路径的文件」

0· 82·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for xjkvbnwe/folder-counter.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "folder-counter" (xjkvbnwe/folder-counter) from ClawHub.
Skill page: https://clawhub.ai/xjkvbnwe/folder-counter
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install folder-counter

ClawHub CLI

Package manager switcher

npx clawhub@latest install folder-counter
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (count files and report types) align with the actions shown in SKILL.md. However, the instructions assume a bundled PowerShell script at C:\Users\41049\.openclaw\workspace\skills\folder-counter\scripts\count_files.ps1 even though no code files are present in the skill bundle. The hard-coded example path with a specific username is also unusual and suggests the examples were exported from a single-dev environment.
!
Instruction Scope
SKILL.md tells the agent (or user) to execute a local PowerShell script to perform counting. Because the skill package contains no scripts, the instructions either: (a) expect a pre-existing local script outside the bundle, or (b) omitted packaging the script. In either case, instructing execution of a local script gives the agent the ability to run arbitrary commands from disk — acceptable for a file-counter only if you can inspect the script beforehand. The instructions do not provide the script contents or a safe fallback; they also reference scanning arbitrary user paths (e.g., D:\项目作品), which is within scope but emphasizes the need to review the actual script.
Install Mechanism
This is an instruction-only skill with no install spec, so nothing is written to disk by the skill itself. That lowers supply-chain risk. The inconsistency is that SKILL.md references a script that isn't packaged — a missing artifact rather than a risky installer.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is proportionate for a local folder-counting task.
Persistence & Privilege
always is false and the skill is user-invocable / can be autonomously invoked (the platform default). The skill does not request persistent presence or modify other skills. No additional privilege concerns in the manifest.
What to consider before installing
This skill's purpose (counting files) is reasonable, but the SKILL.md expects you to run a local PowerShell script that is not present in the package. Before installing or invoking it: (1) ask the publisher for the missing scripts or the script source and review the code — do not run unknown PowerShell scripts; (2) if you must run it, inspect the script locally to ensure it only enumerates files and does not execute other commands or exfiltrate data; (3) test on a non-sensitive sample folder first and avoid running as administrator; (4) if the author cannot provide the script or a trustworthy source, treat the skill as incomplete and do not run it.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b1wty3q83x945mswakbk21s849dp5
82downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

Folder Counter - 文件数量统计

功能

快速统计指定文件夹的文件数量和类型分布,用于在执行 GNO 索引前评估规模。

使用方式

快速统计(只计总数,快)

C:\Users\41049\.openclaw\workspace\skills\folder-counter\scripts\count_files.ps1 -Path "D:\项目作品" -Fast

完整统计(计总数 + 文件类型分布)

C:\Users\41049\.openclaw\workspace\skills\folder-counter\scripts\count_files.ps1 -Path "D:\项目作品"

输出示例

=== 文件统计结果 ===
路径: D:\项目作品
总文件数: 1523

=== 文件类型分布(前20)===
.pdf: 450
.docx: 320
.jpg: 280
.png: 150
.md: 120
.doc: 80
.xlsx: 50
(无扩展名): 40
...

决策参考

文件数量GNO 索引建议
< 1万✅ 直接索引
1万 ~ 10万⚠️ 可索引,需告知耗时
10万 ~ 50万🚨 需确认,可考虑daemon后台
> 50万❌ 建议过滤类型或缩小范围

注意事项

  • 使用 -Fast 参数可以显著提升速度(不扫描扩展名)
  • 大文件夹统计可能需要较长时间,请耐心等待
  • 统计结果可作为选择索引策略的依据

Comments

Loading comments...