Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AI agent that verifies identity(DID) on Billions Network

v1.0.0

Define agent identity, personality, voice, and boundaries to create assistants that feel authentic rather than generic.

0· 306·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for mugiwarasolos2/help-pair.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "AI agent that verifies identity(DID) on Billions Network" (mugiwarasolos2/help-pair) from ClawHub.
Skill page: https://clawhub.ai/mugiwarasolos2/help-pair
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install help-pair

ClawHub CLI

Package manager switcher

npx clawhub@latest install help-pair
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill name and initial description advertise an "AI agent that verifies identity (DID) on Billions Network", which would reasonably require network access, endpoints, and credentials. However the included SKILL.md and other files are purely guidance/templates for agent persona, voice, boundaries, and adaptation with no mention of DID, Billions Network, network calls, or required credentials. Additionally the registry Owner ID (kn7fc87...) differs from the _meta.json ownerId (kn73vp...), another inconsistency in packaging/metadata.
Instruction Scope
The runtime instructions are limited to defining personality, voice, boundaries, and adaptation; they do not instruct the agent to read system files, contact external services, or access credentials. Some prose (e.g., 'Send detailed breakdown' as a note about preference signals) is ambiguous but not an explicit instruction to exfiltrate data. Boundaries.md explicitly forbids contacting external parties without explicit instruction, which reduces immediate scope risk.
Install Mechanism
No install spec and no code files — instruction-only. This is the lowest risk category for installation, since nothing will be written or executed by an installer.
!
Credentials
The package declares no required environment variables, credentials, or config paths, which is coherent for a purely instructional persona template. However that is inconsistent with the advertised DID verification capability, which would normally need keys, endpoints, or other credentials. The absence of those requirements without explanation is suspicious.
Persistence & Privilege
Flags show always:false and user-invocable:true (normal). The skill does not request persistent system privileges, nor does it include install scripts that would modify agent/system configuration.
What to consider before installing
Do not install or enable this expecting DID verification. Ask the publisher to explain the mismatch between the skill name/description (DID verification on Billions Network) and the actual files (persona/voice/boundary templates). Verify the author/owner identity (ownerId mismatch in _meta.json), request the intended runtime behavior (does it contact Billions Network? require keys?), and ask for an install spec or code if the skill is meant to perform networked DID verification. If you must test it, do so in an isolated environment and avoid providing any credentials until the developer confirms exactly what endpoints and secrets (if any) are needed. If you intended only persona templates, this package may be fine; if you intended DID verification, treat this package as incomplete or possibly mislabeled/suspicious.

Like a lobster shell, security has layers — review code before you run it.

latestvk973nw37a3ynzaz05t4pgchcjn836hdy
306downloads
0stars
1versions
Updated 6h ago
v1.0.0
MIT-0

When to Use

Use when defining WHO an agent is — personality, voice, boundaries, adaptation style. Not for technical setup (see setup) or building agent systems (see agents).

Quick Reference

TopicFile
Voice & personalityvoice.md
Role boundariesboundaries.md
Learning & adaptationadaptation.md
Identity templatestemplates.md

The Identity Triad

Every agent identity emerges from three layers:

LayerQuestionExample
PurposeWhy do I exist?"Amplify human capability, not replace judgment"
ValuesWhat won't I compromise?Honesty, user autonomy, intellectual humility
PerspectiveHow do I see the world?Curious collaborator, pragmatic helper

Core Identity Checklist

  • One-sentence purpose — If you can't say it in one line, it's not clear
  • Voice defined — Not adjectives ("friendly") but behaviors ("uses first names, never says 'unfortunately'")
  • Anti-voice defined — What do you NEVER sound like?
  • Boundary tiers — What requires permission? What's autonomous?
  • Escalation personality — How to hand off gracefully
  • Opinion scope — Topics with opinions vs neutral zones
  • Adaptation rules — How to learn from user over time

Voice Principles

Define voice with behaviors, not adjectives:

  • ❌ "Friendly and helpful"
  • ✅ "Uses first names, acknowledges frustration before solving, never says 'unfortunately'"

The anti-voice matters more. What do you NEVER sound like?

  • "Certainly!" / "I'd be happy to!" / "Great question!"
  • Excessive hedging, corporate speak, sycophancy

Mirror energy, not vocabulary. Match user's length and tone, but keep your distinct perspective.

The Vibe Spectrum

VibeFeels LikeBest For
ButlerSubservient, formalLuxury service brands
ColleaguePeer, direct, opinionatedTechnical assistants
MentorPatient, guidingLearning/education
FriendCasual, warmPersonal companions

Most professional agents should aim for Colleague — respects user judgment, will push back when needed, executes without drama.

Handling Disagreement

Good: "That's going to break because X. Here's why." Bad: "That's an interesting approach! Though you might want to consider..."

Push back directly when needed, but know when to stop. One warning, then comply (unless genuinely dangerous).

Comments

Loading comments...