Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Leafengines Clawhub Skill

v1.1.0

LeafEngines MCP Server - Agricultural Intelligence API for Claude and OpenClaw. Provides 9 tools for soil analysis, weather forecasting, crop recommendations...

0· 130·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for qwarranto/leafengines-clawhub-skill.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Leafengines Clawhub Skill" (qwarranto/leafengines-clawhub-skill) from ClawHub.
Skill page: https://clawhub.ai/qwarranto/leafengines-clawhub-skill
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install leafengines-clawhub-skill

ClawHub CLI

Package manager switcher

npx clawhub@latest install leafengines-clawhub-skill
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's name, description, SKILL.md tools list, and API reference are coherent for an agricultural intelligence MCP server. However the SKILL.md metadata declares required binaries (node, npm) while the included install script only checks for curl and the registry metadata at the top lists no required binaries — this is an inconsistency between claimed runtime needs and the actual installer.
Instruction Scope
Runtime instructions only direct the agent/user to configure an MCP server URL and include an x-api-key header for calls to a single Supabase-hosted endpoint. The install.sh writes a config file into ~/.openclaw/config/config.yaml (expected for an OpenClaw skill). The instructions for obtaining the API key (open a GitHub issue) are unusual because they risk exposing credentials if users paste secrets in a public issue.
Install Mechanism
There is no automated install spec; the repo includes a local scripts/install.sh that performs only local operations (checks curl, creates ~/.openclaw/config, writes an instructions file, tests a health endpoint). The script does not download or execute remote code or extract archives from arbitrary URLs.
!
Credentials
The skill does not declare required environment variables, but it requires an x-api-key for the external MCP endpoint — that's expected. The concern is the suggested API key onboarding (opening a GitHub issue) which could result in accidental public disclosure of keys. Also, the declared node/npm requirement in SKILL.md metadata is not justified by the included files, another mismatch that should be clarified.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent settings. It does write/modify a per-user OpenClaw config file (~/.openclaw/config/config.yaml), which is reasonable for a client MCP integration but should be reviewed by the user before running.
What to consider before installing
This skill appears to implement an agricultural MCP server integration, but there are a few red flags to review before installing or using it: 1) Clarify why SKILL.md lists node/npm as required while the install script only uses curl — don't run things that need tools you don't trust. 2) Be careful with API key onboarding: the instructions tell you to request a key via a GitHub issue — do not paste any secret keys or private data into public issues. Ask the maintainer how keys are delivered (prefer private email or a secure dashboard). 3) Verify the supabase endpoint owner and the GitHub repository (https://github.com/QWarranto/leafengines-claude-mcp) to confirm legitimacy. 4) Inspect the install script content and back up your existing ~/.openclaw/config before running it; consider manually adding the mcpServers block to your config rather than running scripts. 5) If you need higher assurance, request an official homepage, public release notes, or an explanation of the TurboQuant claims and node/npm requirement — that additional info would raise confidence.

Like a lobster shell, security has layers — review code before you run it.

latestvk977hzr1j9ge8zj622pbxf62fh83zza8
130downloads
0stars
3versions
Updated 4w ago
v1.1.0
MIT-0

LeafEngines MCP Server v1.1.0

TurboQuant-Powered Agricultural Intelligence API for Claude and OpenClaw. Provides environmental data and analysis tools with 6x memory reduction, 8x faster inference. Gemma 7B now runs on 4GB devices.

Features

TurboQuant Performance:

  • 6x memory reduction with Google TurboQuant optimization
  • 8x faster inference for agricultural analysis
  • Gemma 7B on 4GB devices (previously required 8GB+)
  • Cloud-equivalent performance on edge devices

10 Agricultural Intelligence Tools:

  1. Soil Analysis - Composition and recommendations
  2. Weather Forecast - 7-day forecasts
  3. Crop Recommendations - Based on soil/climate
  4. Pest Detection - Identify common pests
  5. Irrigation Scheduling - Water optimization
  6. Yield Prediction - Crop yield estimates
  7. Market Prices - Agricultural commodity prices
  8. Sustainability Score - Environmental impact
  9. Farm Planning - Seasonal planning tools
  10. TurboQuant Capabilities - Check optimization status (FREE)

Pricing Tiers

API Access (per 1,000 requests):

  • Commoditized: $0.001 (Basic soil/water data)
  • Enhanced: $0.003 (Environmental impact, crop suitability)
  • Proprietary: $0.01 (Planting optimization, carbon credits)
  • EXCLUSIVE: $0.02 (Patent-pending environmental compatibility)
  • TurboQuant Testing: FREE (Check optimization capabilities)

Monthly Plans:

  • Starter: $149/month (5k commoditized + 3k enhanced + 1.5k proprietary + 500 exclusive)
  • Pro: $499/month (20k commoditized + 10k enhanced + 5k proprietary + 2k exclusive)
  • Enterprise: $1,999/month (100k commoditized + 50k enhanced + 25k proprietary + 10k exclusive)

Quick Start

1. Get API Key

Visit: https://github.com/QWarranto/leafengines-claude-mcp/issues/new?template=get-api-key.md

2. Configure Claude Desktop

  1. Open Claude Desktop settings
  2. Navigate to Developer → MCP Servers
  3. Add new server:
    • URL: https://wzgnxkoeqzvueypwzvyn.supabase.co/functions/v1/mcp-server
    • Headers: x-api-key: YOUR_API_KEY_HERE

3. Configure OpenClaw

Add to OpenClaw config:

mcpServers:
  leafengines:
    url: https://wzgnxkoeqzvueypwzvyn.supabase.co/functions/v1/mcp-server
    headers:
      x-api-key: YOUR_API_KEY_HERE

Use Cases

For Farmers & Agriculturists

  • Crop planning based on soil and climate
  • Irrigation optimization using weather forecasts
  • Pest management with detection tools
  • Yield prediction for harvest planning

For Researchers & Students

  • Environmental analysis for studies
  • Climate impact assessment
  • Agricultural data for research projects
  • Sustainability scoring

For Developers & AI Agents

  • Agricultural intelligence in applications
  • Environmental data for AI models
  • Real-time weather and soil data
  • Integration with farming IoT systems
  • TurboQuant optimization testing and deployment

For TurboQuant Users

  • Test optimization on your hardware
  • Verify performance improvements (6x memory, 8x speed)
  • Check compatibility for Gemma 7B on 4GB devices
  • Optimize deployment for edge/offline scenarios

API Documentation

Base URL: https://wzgnxkoeqzvueypwzvyn.supabase.co/functions/v1/

Authentication: x-api-key header

Endpoints:

  • GET /api/health - Service health check
  • POST /soil-analysis - Soil composition analysis
  • GET /weather-forecast - Weather forecasts
  • POST /crop-recommendation - Crop suggestions
  • POST /pest-detection - Pest identification
  • POST /irrigation-schedule - Water optimization
  • POST /yield-prediction - Yield estimates
  • GET /market-prices - Commodity prices
  • POST /sustainability-score - Environmental impact
  • POST /farm-planning - Seasonal planning
  • GET /turbo-quant-capabilities - TurboQuant optimization status (FREE)

Support & Community

License

Proprietary - Commercial API service. Free tier available for testing including TurboQuant capabilities check.

TurboQuant Technology

Powered by Google's TurboQuant research: 6x memory compression for LLMs enabling Gemma 7B to run on 4GB devices with 8x faster inference for agricultural analysis tasks.

Comments

Loading comments...