Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Iflow Template Toolkit

v1.0.0

Dependency-free template engine with variable substitution, conditionals, loops, and multi-language support for iFlow skills.

0· 100·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for sylvanxiao/iflow-template-toolkit.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Iflow Template Toolkit" (sylvanxiao/iflow-template-toolkit) from ClawHub.
Skill page: https://clawhub.ai/sylvanxiao/iflow-template-toolkit
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install iflow-template-toolkit

ClawHub CLI

Package manager switcher

npx clawhub@latest install iflow-template-toolkit
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name and description match the included code: template_engine.py and translator.py implement rendering, conditionals, loops, and JSON-backed translations. No unrelated binaries, env vars, or services are requested.
Instruction Scope
SKILL.md usage is scoped to rendering templates and initializing translations. The engine reads template files from disk (TemplateEngine.load_template) and translation JSONs (Translator.from_dir), which is expected for a template/i18n tool; however, rendering arbitrary user-supplied template names or giving absolute file paths could cause the engine to open any file the agent/user permits. The engine does not execute code or call eval(), and conditional parsing is limited to simple operators (==, !=, in, truthiness).
Install Mechanism
There is no install spec (instruction-only); the package contains source files but nothing is downloaded or executed automatically during install. This is low-risk from installation mechanics.
Credentials
No environment variables, credentials, or config paths are required. Declared requirements (Python 3.6+) are proportionate to the functionality.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills. disable-model-invocation is default (agent may invoke autonomously), which is normal and not by itself a red flag.
Assessment
This skill appears to implement exactly what it claims: a small dependency-free template engine and translator. Before installing, consider: (1) avoid rendering untrusted templates or passing absolute/system file paths as template names, since the engine will open files the runtime user can access; (2) translation loading (from_dir) reads JSON files from disk—only load trusted translations; (3) although the engine does not use eval or network calls, review the code if you plan to run it in sensitive environments. If you want to reduce risk, run the included tests locally and restrict what template paths the agent is allowed to access. If you are concerned about autonomous invocation, you can disable the skill or restrict its permissions in your agent settings.

Like a lobster shell, security has layers — review code before you run it.

latestvk976nxk5tt9txgjk4g34qpj9gn83s0ha
100downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

iFlow Template Toolkit

Description

A simple, dependency-free template and internationalization toolkit for iFlow skills. Provides template rendering with variable substitution, conditionals, and loops, plus multi-language support.

Installation

# Clone or copy to your skills directory
openclaw skills install iflow-template-toolkit

Usage

Template Engine

from iflow_template_toolkit import TemplateEngine, render_template

# Quick render from string
result = render_template("Hello {{name}}!", {"name": "World"})
# Output: "Hello World!"

# Using TemplateEngine class
engine = TemplateEngine("./templates")
result = engine.render_file("config.md", {
    "project_name": "my-project",
    "team_size": 5
})

Template Syntax

Variables:

Hello {{name}}!
Project: {{project_name}}

Conditionals:

{% if status == "active" %}
Status is active
{% elif status == "pending" %}
Status is pending
{% else %}
Status unknown
{% endif %}

Loops:

{% for item in items %}
- {{item}} ({{index1}})
{% endfor %}

Internationalization

from iflow_template_toolkit import Translator, t, init_translator

# Initialize with translations
init_translator({
    'en': {'greeting': 'Hello', 'farewell': 'Goodbye'},
    'zh': {'greeting': '你好', 'farewell': '再见'}
}, default_lang='en')

# Translate
t('greeting')           # "Hello"
t('greeting', lang='zh')  # "你好"

# With interpolation
t('welcome', name='John')  # "Welcome, John!" (if translation is "Welcome, {name}!")

Features

FeatureDescription
Variable Substitution{{variable}} syntax
Conditionals{% if %}...{% elif %}...{% else %}...{% endif %}
Loops{% for item in items %}...{% endfor %}
Comparison==, !=, in, not in operators
Loop Variablesindex, index1, first, last
Multi-languageJSON-based translation files
FallbackFalls back to default language

Requirements

  • Python 3.6+
  • No external dependencies

File Structure

iflow-template-toolkit/
├── src/
│   ├── __init__.py
│   ├── template_engine.py
│   ├── i18n/
│   │   ├── __init__.py
│   │   ├── translator.py
│   │   └── langs/
│   │       ├── en.json
│   │       └── zh.json
│   └── templates/
├── tests/
├── SKILL.md
└── README.md

Version

1.0.0

Comments

Loading comments...