Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

ai-grammar-checker

v1.0.0

Check and correct grammar errors in text

0· 100·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for jpengcheng523-netizen/jpeng-ai-grammar-checker.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "ai-grammar-checker" (jpengcheng523-netizen/jpeng-ai-grammar-checker) from ClawHub.
Skill page: https://clawhub.ai/jpengcheng523-netizen/jpeng-ai-grammar-checker
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install jpeng-ai-grammar-checker

ClawHub CLI

Package manager switcher

npx clawhub@latest install jpeng-ai-grammar-checker
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The name/description (grammar checking) is plausible, but the SKILL.md requires a GRAMMAR_API_KEY and running a local script (python3 scripts/ai_grammar_checker.py). The registry metadata declares no required env vars or code files. Requesting an API key could be legitimate for a grammar service, but the declared metadata does not match the instructions, which is incoherent.
!
Instruction Scope
Runtime instructions tell the agent to run a local script at scripts/ai_grammar_checker.py and to set GRAMMAR_API_KEY. However, there are no code files in the package and no explanation of what the script does, where it comes from, or which external endpoint the API key is for. The instructions do not reference other files, but they assume local artifacts and a secret that are not present or declared.
Install Mechanism
There is no install spec (instruction-only skill), so nothing will be written to disk by an installer. This is low-risk from an install mechanism perspective.
!
Credentials
The SKILL.md asks the user to set GRAMMAR_API_KEY, but the skill metadata lists no required environment variables and no primary credential. That mismatch is a red flag: the skill expects a secret but does not declare it, and there is no information about which service the key is for or what permissions it needs.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence. Autonomous invocation is allowed by default but is not in itself a problem and is not combined with other high privileges here.
Scan Findings in Context
[NO_SCAN_FINDINGS] expected: The skill is instruction-only with no code files, so the regex-based scanner had nothing to analyze. Absence of findings is not evidence of safety.
What to consider before installing
This skill's instructions reference a local Python script (scripts/ai_grammar_checker.py) and an API key (GRAMMAR_API_KEY) but the skill package contains no code, no source link, and the registry metadata lists no required env vars — these mismatches could be harmless (author forgot to include files) or intentional. Before installing or running: ask the author to provide the script source or a trustworthy homepage, confirm which external service the API key targets and what permissions it needs, and never paste real credentials until you verify the implementation. If you must test, use a dummy API key and run in a sandbox. If the author cannot provide source or explanation, avoid installing or granting real secrets.

Like a lobster shell, security has layers — review code before you run it.

latestvk970trhpses1ts17ae0b71xnvh83npq0
100downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

AI Grammar Checker

Check and correct grammar errors in text

When to Use

  • User needs nlp related functionality
  • Automating grammar tasks
  • Ai operations

Usage

python3 scripts/ai_grammar_checker.py --input <input> --output <output>

Configuration

Set required environment variables:

export GRAMMAR_API_KEY="your-api-key"

Output

Returns JSON with results:

{
  "success": true,
  "data": {}
}

Comments

Loading comments...