Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Louisvuitton
v1.0.1提供Louis Vuitton箱包、皮具、时装信息，价格查询、门店位置及真伪鉴定支持。
⭐ 0· 61·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The description promises price lookup, store location, and authenticity verification. The skill requests no credentials, has no install, and the SKILL.md contains only static encyclopedic text—there is no mechanism described to obtain current prices, query store locations, or verify authenticity, which is inconsistent with the stated capabilities.
Instruction Scope
SKILL.md provides an outline and static content sections (brand story, product matrix, global footprint, industry notes) and only triggers on user queries. It does not instruct the agent to call external APIs, official websites, databases, or user-supplied images for authentication, so dynamic features mentioned in the description are unsupported by the instructions.
Install Mechanism
No install spec and no code files — lowest-risk delivery method. Nothing is written to disk by an installer because there is no installer.
Credentials
No environment variables, credentials, or config paths are requested (low privilege). However, features like live price queries, store lookups, or authenticity checks would typically require external data sources or credentials; the absence of those suggests missing or incomplete implementation rather than appropriate minimal permissions.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent presence or elevated privileges. Autonomous invocation is allowed by default but not combined with other red flags here.
What to consider before installing
The skill appears to be a static Louis Vuitton brand summary, not a tool that actually looks up live prices, finds stores, or verifies authenticity. If you need those capabilities, ask the author which data sources or APIs the skill uses (or look for a skill that integrates with official store APIs or reputable databases). Do not rely on this skill for authentication or current pricing; verify with Louis Vuitton's official site or an authorized expert. Because the mismatch is about missing functionality rather than dangerous behavior, the risk is low, but the utility is likely limited.Like a lobster shell, security has layers — review code before you run it.
latestvk970k73r6wx93znp26gb7e336x84w3s7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.