Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Head Tool

v1.0.0

Display the first lines of files. Use for quickly previewing file contents, checking headers, or sampling data.

0· 27·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dinghaibin/head-tool.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Head Tool" (dinghaibin/head-tool) from ClawHub.
Skill page: https://clawhub.ai/dinghaibin/head-tool
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install head-tool

ClawHub CLI

Package manager switcher

npx clawhub@latest install head-tool
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The stated purpose (show first lines of files) matches the supplied script: scripts/head.py prints the first N lines or reads from stdin. However SKILL.md advertises additional options (-c to show bytes, -q quiet mode, multiple files) that the script does not implement; this mismatch is unexplained and could confuse users or hide missing functionality.
Instruction Scope
SKILL.md instructs the agent to run head-tool and to read from stdin when no file is specified, which the script follows. The instructions imply handling multiple files and byte-mode output, but the runtime code only accepts a single optional filename and a line-count flag, so the instruction set is broader than the actual code behavior.
Install Mechanism
This is an instruction-only skill with one small Python script and no install spec; nothing is downloaded or installed automatically, which minimizes risk.
Credentials
No environment variables, credentials, or config paths are requested or required; the script only reads files or stdin, which is consistent with purpose.
Persistence & Privilege
The skill does not request always-on presence and has normal invocable defaults; it does not modify system or other skills' configs.
What to consider before installing
This skill appears to be what it claims (a simple head-like viewer) and contains no network or credential requests, but the documentation and examples promise features (-c byte mode, -q quiet, multiple files) that the included script does not implement. Before installing or relying on it: 1) treat the package as untrusted code and review the script (it's short) or run it in a sandbox; 2) be aware the script reads entire files into memory (open(...).readlines()), which can cause large-memory use on very big files — prefer a streaming implementation if you need to inspect huge logs; 3) if you need the advertised -c/-q/multiple-file behavior, either update the code or do not rely on this skill; 4) since the skill can read any file the agent has permission to access, avoid invoking it on sensitive paths unless you trust the environment. If you want a fully coherent skill, ask the author to either update SKILL.md to match the code or extend the script to implement the advertised options and safe streaming/encoding handling.

Like a lobster shell, security has layers — review code before you run it.

latestvk97exttvm86rzfbzmsnq1ytdcd85pvbh
27downloads
0stars
1versions
Updated 3h ago
v1.0.0
MIT-0

File Header Viewer

Output the beginning of files, defaulting to the first 10 lines. Essential for previewing log files, CSV headers, and large text files without loading them entirely.

Usage

head-tool [options] [file...]

Options

  • -n N: Show first N lines (default: 10)
  • -c N: Show first N bytes instead of lines
  • -q: Quiet mode (suppress filename headers)
  • Read from stdin when no file specified

Examples

# Show first 10 lines
head-tool data.csv

# Show first 20 lines
head-tool -n 20 log.txt

# Show first 100 bytes
head-tool -c 100 config.yaml

Comments

Loading comments...