Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Grasshopper Generator

v1.0.0

Generate Rhino 7 Grasshopper (.ghx) XML files from natural language descriptions or images. Build parametric definitions with native GH components, GhPython...

0· 65·0 current·0 all-time
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The stated purpose (generate Rhino 7 .ghx files) matches the included Python generator and GUID database. However, the documentation claims image-based analysis and provides a 'reference template' file (template_voronoi.ghx) that is referenced in docs but not present in the provided file manifest. The image-processing capability would normally require additional dependencies or code (e.g., ML model, OpenCV), none of which are present.
!
Instruction Scope
SKILL.md describes an input analysis step for images ('Identify form...') and suggests the skill can accept images, but there is no code or listed dependency to perform image analysis in scripts/ghx_generator.py. The runtime instructions show only programmatic API usage for building XML and adding GhPython code; they do not describe how image data would be processed or uploaded. The docs also reference a template file that is missing from the manifest, which is an inconsistency between instructions and delivered files.
Install Mechanism
This is an instruction-only skill with a bundled Python script; there is no installer, no external download, and no install-time network fetches declared. That lowers risk — nothing will be automatically written or downloaded beyond the packaged files.
Credentials
The skill requests no environment variables, binaries, or external credentials. The code reads only its own companion JSON (references/component_guids.json) and writes .ghx output files, which is proportionate to its stated function.
Persistence & Privilege
The skill does not request always:true and does not declare any behavior that modifies other skills or global agent settings. It runs locally when invoked and has no autonomous installation behaviors in the manifest.
What to consider before installing
The generator code appears to legitimately create .ghx files and uses an included GUID database, but the docs overpromise: they mention image analysis and a reference template that aren't present in the package. Before installing or using this skill, ask the author to confirm (1) whether image-to-geometry functionality exists and, if so, where the image-processing code or model lives and what dependencies are required; (2) why template_voronoi.ghx is referenced but not shipped; and (3) whether the script will ever fetch remote models or resources. If you proceed, run the skill in a sandboxed environment first, inspect the full ghx_generator.py for any network calls or subprocess execution (the provided portion looks local-only), and validate generated .ghx output in a safe test Rhino instance. If you need image analysis, prefer a package that documents its model and dependencies fully.

Like a lobster shell, security has layers — review code before you run it.

latestvk971wa1sxmnwyerv1jd19t153s84m8zs
65downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

Grasshopper Generator

Generate Rhino 7 Grasshopper (.ghx) files programmatically.

Workflow

1. Analyze Input

Image → Identify form (tower/dome/surface/facade), key features (twist/array/voronoi/diagrid), proportions. Text → Parse the same from description.

2. Design the Graph

Sliders → Geometry → Transforms → Booleans → Output

Component priority:

  1. Native GH components (see references/component_guids.json for 152 known GUIDs)
  2. GhPython Script for complex custom logic
  3. Third-party plugins only when explicitly requested

Common patterns:

FormKey Components
Twisted towerRectangle → Rotate → Extrude → Series
Curved facadeCurve → Divide → Orient → Surface
VoronoiPopulate 2D → Voronoi → Boundary Surfaces
DiagridHexagonal → Scale → Loft
DomeCircle → Rotate → Sweep1
Custom logicGhPython Script

3. Generate .ghx

import sys; sys.path.insert(0, 'SKILL_DIR/scripts')
from ghx_generator import GHXGenerator

gen = GHXGenerator("Definition Name", "Description")
r = gen.add_slider("Radius", 20, 1, 100, x=50, y=50)
c = gen.add_component("Circle", inputs=["Base Plane", "Radius"], outputs=["Circle"], x=300, y=50)
gen.connect(r, "output", c, "Radius")
gen.save("output.ghx")

4. GhPython Fallback

For complex geometry not achievable with native components:

py = gen.add_python("Custom", code, inputs=["x", "y"], outputs=["a"], x=300, y=200)

GhPython has full Rhino.Geometry API. Input variables available by name. Assign a = result for output.

5. Deliver

Save .ghx and send to user. Note adjustable parameters (sliders), definition purpose, and any plugin dependencies.

File Locations

  • Generator: scripts/ghx_generator.py — full API with add_slider, add_component, add_python, connect, save
  • GUID database: references/component_guids.json — 152 authentic component GUIDs extracted from real .gh files
  • Reference template: references/template_voronoi.ghx — real Grasshopper file for structural reference

Notes

  • Output is .ghx (XML), fully compatible with Rhino 7
  • All GUIDs extracted from real Grasshopper installations
  • For components not in the database, GhPython Script handles everything
  • Supports wiring via connect(source_ref, source_param, target_ref, target_param)

Comments

Loading comments...