Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Livestock Assistant

v0.1.0

AI-powered livestock management assistant for Spanish-speaking farmers. Provides expert advice on herd management, animal health, reproduction, genetics, nut...

1· 193·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for antonygiomarxdev/livestock-assistant.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Livestock Assistant" (antonygiomarxdev/livestock-assistant) from ClawHub.
Skill page: https://clawhub.ai/antonygiomarxdev/livestock-assistant
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: OPENAI_API_KEY, ANTHROPIC_API_KEY, GOOGLE_GENERATIVE_AI_API_KEY
Required binaries: node
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install livestock-assistant

ClawHub CLI

Package manager switcher

npx clawhub@latest install livestock-assistant
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill claims to provide a Node.js REST API and references runtime files (scripts/start.sh, src/assistant/systemPrompt.ts), but the bundle contains no code or scripts—only docs. Requiring the node binary and installing ts-node would make sense if code were present, but as packaged the install/requirements are disproportionate to an instruction-only skill.
!
Instruction Scope
Runtime instructions tell the agent to start a local Express server and to load a system prompt from src/assistant/systemPrompt.ts; those files are not present in the manifest. The SKILL.md also lists reading domain reference files (which are present) — that part is fine — but the missing start script and source files are a clear mismatch.
Install Mechanism
Install spec requests the ts-node npm package (creates ts-node binary). Installing ts-node from npm is a moderate-risk action but is unnecessary here because no TypeScript code is provided. No external download URLs or extract steps are present.
!
Credentials
requires.env lists OPENAI_API_KEY, ANTHROPIC_API_KEY, and GOOGLE_GENERATIVE_AI_API_KEY, but SKILL.md states 'Set at least one API key' and marks OPENAI_API_KEY as primaryEnv. Requiring all three credentials is disproportionate and inconsistent with the stated 'at least one' policy. Supplying multiple model provider keys increases blast radius if the skill acts autonomously.
Persistence & Privilege
The skill does not request always:true, does not declare config paths, and is user-invocable only. Autonomous invocation is allowed by default (disable-model-invocation: false), which is normal, but combined with the multi-provider credential requirement this raises caution (see guidance).
What to consider before installing
This package appears incomplete or mispackaged. Before installing or providing API keys: 1) Confirm whether the repository actually includes the Node/Express code and the scripts referenced in SKILL.md (scripts/start.sh, src/assistant/systemPrompt.ts). 2) Don't supply all three AI provider keys unless you trust the author — provide only the single provider key you intend to use. 3) Ask the maintainer to fix the manifest so requires.env matches the documented 'at least one' requirement, or include the missing code. 4) If you plan to run the server locally, review the server code and startup script for network endpoints, data collection, and any external calls. 5) If you cannot validate the code/repository, avoid installing or granting credentials; treat this as an untrusted, incomplete skill.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🐄 Clawdis
Binsnode
EnvOPENAI_API_KEY, ANTHROPIC_API_KEY, GOOGLE_GENERATIVE_AI_API_KEY
Primary envOPENAI_API_KEY

Install

Node
Bins: ts-node
npm i -g ts-node
latestvk979qsgdasgfrp79yb97c5jgbx835tq4
193downloads
1stars
1versions
Updated 4h ago
v0.1.0
MIT-0

OpenClaw Livestock Assistant

Expert livestock management assistant for Spanish-speaking farmers. Responds always in Spanish. Combines AI chat with a REST API for herd record-keeping.

Capabilities

  • Herd management — register and track animals (bovine, ovine, caprine, porcine, equine, poultry)
  • Animal health — vaccination schedules, disease identification, treatment guidance
  • Reproduction — heat detection, pregnancy tracking, birth records, genetics
  • Nutrition — ration formulation, forage selection, supplementation
  • Breed advice — selection by aptitude (meat / milk / wool / dual-purpose)
  • REST API — persistent record-keeping via Express server on http://localhost:3000

Starting the API Server

Before using any REST API endpoint, start the server:

bash scripts/start.sh

The server exposes /health, /api/animals, and /api/assistant — see references/api.md for the full endpoint reference.

AI Provider Configuration

The assistant supports OpenAI, Anthropic (Claude), and Google (Gemini). Set at least one API key; the assistant auto-selects the provider.

ProviderAPI key env varDefault model
OpenAIOPENAI_API_KEYgpt-5
AnthropicANTHROPIC_API_KEYclaude-opus-4-6
GoogleGOOGLE_GENERATIVE_AI_API_KEYgemini-2.5-pro

Override explicitly via:

  • AI_PROVIDER=openai|anthropic|google — force a specific provider
  • AI_MODEL=<model-id> — override the model ID for the chosen provider

AI Chat

Every interaction should be in Spanish. Use the system prompt embedded in src/assistant/systemPrompt.ts as the agent's knowledge baseline.

Create a session before sending messages:

curl -X POST http://localhost:3000/api/assistant/sessions
# → { "sessionId": "...", "welcome": "¡Hola! Soy el Asistente de Ganadería..." }

curl -X POST http://localhost:3000/api/assistant/sessions/<sessionId>/messages \
  -H "Content-Type: application/json" \
  -d '{"message": "¿Cómo prevenir la mastitis en vacas lecheras?"}'

Domain References

Load these files when you need detailed reference data:

ReferenceWhen to read
references/breeds.mdUser asks about breeds, selection, or characteristics
references/diseases.mdUser reports symptoms, asks about prevention or treatment
references/nutrition.mdUser asks about feeding, rations, forages, or supplementation
references/api.mdUser wants to register animals or retrieve herd data

Animal Status Reference

FieldAllowed values
speciesbovine ovine caprine porcine equine poultry
sexmale female
statusactive sold dead quarantine
healthStatushealthy sick in_treatment recovered
reproductiveStatusopen pregnant lactating in_heat served not_applicable

Safety Guidelines

  • Never diagnose diseases definitively — always recommend a veterinarian for emergencies.
  • Zoonotic diseases (e.g., Brucelosis) must be flagged immediately.
  • Urgency levels: lowmediumhighemergency. Escalate accordingly.

Comments

Loading comments...