Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

GenArt

v2.0.0

Generate algorithmic visual art — flow fields, fractals, cellular automata, circle packing, wave patterns. SVG + PNG output.

0· 106·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for eliot-onbox/genart.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "GenArt" (eliot-onbox/genart) from ClawHub.
Skill page: https://clawhub.ai/eliot-onbox/genart
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install genart

ClawHub CLI

Package manager switcher

npx clawhub@latest install genart
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, SKILL.md, and the visible portions of genart.py align: this is a Python generative-art tool producing SVG/PNG. However, the package advertises 'PNG rendering' and 'optional NumPy acceleration' while registry metadata lists no required binaries or environment and no install spec. Also package.json is present for a Node package even though the runtime is Python; these mismatches are unexpected though not necessarily malicious.
Instruction Scope
SKILL.md instructs running genart.py with CLI flags and claims deterministic, scriptable outputs. The instructions do not mention any external tools required to produce PNG output or optional acceleration. The code imports subprocess and os (visible), which suggests it may invoke external rasterizers (e.g., inkscape, rsvg-convert, ImageMagick) or perform filesystem operations — none of which are declared in SKILL.md or registry metadata. This omission is a scope/information gap that should be clarified.
Install Mechanism
There is no install specification (instruction-only skill with a bundled Python script). That is the lowest-risk install model. The presence of package.json is somewhat odd for a Python-only tool but not itself dangerous. No remote download URLs or extract operations are present in the metadata.
Credentials
The skill requests no environment variables, credentials, or config paths, which is proportionate for a local art generator. There are no declared secrets. That said, the code's use of subprocess/os means it could read or write filesystem content if implemented to do so; the current metadata does not claim such access explicitly.
Persistence & Privilege
The skill is not always-enabled and uses default invocation settings. It does not request elevated or persistent platform privileges in the metadata. Nothing in the manifest indicates it would modify other skills or global agent configuration.
What to consider before installing
The tool looks like a genuine generative-art script, but there are a few gaps you should check before installing or running it: 1) Inspect the full genart.py for any subprocess calls — search for subprocess.run/ Popen or explicit command strings; if it calls external programs to render PNGs, confirm which binaries (inkscape, rsvg-convert, ImageMagick) and that you are comfortable providing those. 2) Confirm there are no network calls or attempts to read unexpected files (home dir, SSH keys, shell history). 3) Note the SKILL.md mentions optional NumPy but the metadata lists no dependencies; if you need NumPy, install it separately from a trusted source. 4) Because source/homepage are unspecified, consider running the script in a sandboxed environment (container or VM) first, or review the entire source for unexpected behavior. If you want, I can scan the rest of genart.py (the truncated portion) for subprocess usage, file I/O, or network activity — provide the remainder and I'll review it line-by-line.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎨 Clawdis
latestvk971bdczat6szhxqq7vwazqaas83g362
106downloads
0stars
4versions
Updated 1mo ago
v2.0.0
MIT-0

GenArt Skill

Procedural visual art generator using Python. Produces SVG vector art and PNG raster output from algorithmic patterns and mathematical structures.

Algorithms

Flow Fields

Perlin noise-based vector fields that guide particle motion, creating organic flowing patterns and fluid-like aesthetics.

Fractals

Recursive geometric structures: Mandelbrot sets, Julia sets, L-systems, and self-similar branching patterns with configurable depth and parameters.

Cellular Automata

Conway's Game of Life and variants, generating complex patterns from simple local rules. Produces static snapshots or animated sequences.

Circle Packing

Algorithm-driven placement of circles in constrained spaces, creating organic compositions with visual balance.

Wave Patterns

Sinusoidal and superposed wave interference, creating ripple effects, moiré patterns, and harmonic visualizations.

Usage

genart.py --algorithm flow_field --output art.svg [--params "noise=0.5,scale=10"]
genart.py --algorithm fractal --output mandelbrot.png --width 1024 --height 1024
genart.py --algorithm cellular_automata --output ca.svg --iterations 100
genart.py --algorithm circle_pack --output circles.svg --target-count 200
genart.py --algorithm waves --output waves.png --frequency 5 --amplitude 100

Outputs SVG for scalable vector art or PNG for raster. All fully deterministic and scriptable.

Features

  • Deterministic: Seed-based generation for reproducible art
  • Scalable: SVG output scales infinitely without quality loss
  • Raster export: PNG rendering for web and print
  • Configurable: Every algorithm exposes tunable parameters
  • Fast: Optimized Python with optional NumPy acceleration

Comments

Loading comments...