Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Mockplus Reader

v1.0.0

读取和分析 MockPlus 在线设计页面。用于:(1)打开并解析 MockPlus 网页链接,(2)提取页面中的设计信息、结构、组件,(3)分析原型稿内容和交互说明。当用户发送 MockPlus 链接或要求分析原型稿时使用此技能。

0· 106·1 current·1 all-time
byAdin@a-din

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for a-din/mockplus-reader.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Mockplus Reader" (a-din/mockplus-reader) from ClawHub.
Skill page: https://clawhub.ai/a-din/mockplus-reader
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install mockplus-reader

ClawHub CLI

Package manager switcher

npx clawhub@latest install mockplus-reader
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill name and description say it will open and parse MockPlus pages and the instructions use a 'browser' tool to open a URL and snapshot the page, which is coherent. However, the SKILL.md also claims a pre-generated uni-app + Vue3 project exists at a Windows path (C:\Users\Ding\.openclaw\workspace\lutixia\) and lists npm/uni-cli commands to run. The registry metadata and requirement fields declare no install steps, no required binaries (e.g., node/npm), and no file access. That mismatch suggests either outdated/example text or hidden expectations (writing/reading files, Node/npm usage) that are not declared.
Instruction Scope
Most instructions are scoped to opening a MockPlus URL via the 'browser' tool and taking a snapshot, then extracting page title, component tree, interactions, and comments — this matches the stated purpose. The problematic part is the '已实现项目' section that implies local filesystem artifacts and instructs running npm commands to build/run a generated project. The SKILL.md does not instruct the agent to read arbitrary unrelated system files, but the mention of a specific local path could encourage the agent to access the host filesystem. Also it notes that MockPlus pages may require login; no guidance is provided about how credentials will be supplied or protected.
!
Install Mechanism
There is no install spec (instruction-only), which is low risk. However, the document's claim that a uni-app project has already been generated and that users should run npm and a global uni-cli install conflicts with the absence of any declared install steps or required binaries. If the skill expects to generate or manage that project, an explicit install mechanism and declared dependencies (Node, npm, uni-cli) should be present — their absence is an inconsistency.
Credentials
The skill requests no environment variables or credentials, which is proportionate for a read-only page-parsing skill. But the SKILL.md acknowledges MockPlus pages may require login to view content; since no auth variables or OAuth flow are declared, it is unclear how credentials are intended to be provided. Also the hard-coded Windows path is platform-specific and not justified by the skill metadata.
!
Persistence & Privilege
The skill does not request persistent inclusion (always: false) and has no declared installation that would modify agent-wide settings, which is OK. However, the presence of a concrete local project path implies the skill either (a) was authored on a particular machine and included an example path, or (b) expects to create/read files at that path. Because no install or file access is declared, this is an unexplained elevation of scope (filesystem persistence) and should be clarified.
What to consider before installing
This skill's core behavior (use a 'browser' tool to open a MockPlus link and extract page structure/interactions) is reasonable. However: 1) The SKILL.md contains an unexplained claim that a uni-app/Vue3 project already exists at C:\Users\Ding\.openclaw\workspace\lutixia\ and shows npm commands — but the skill declares no install steps or required binaries (node/npm). Ask the author to clarify whether the skill will generate files on your machine and to provide an explicit install spec and declared dependencies if so. 2) If the skill needs to access MockPlus content behind login, confirm how credentials are supplied and stored (do not provide secrets unless a secure auth flow is documented). 3) Avoid running global npm installs or unknown build commands until you inspect the code that would be executed; prefer running any build in an isolated environment or container. 4) Because the source/homepage are unknown, consider requesting provenance (Git repo, author contact) before installing. These inconsistencies are likely explainable (example content left in SKILL.md), but you should get clarification before granting the skill filesystem or build privileges.

Like a lobster shell, security has layers — review code before you run it.

latestvk97817r8yjccar80brzm1kkevx838ff0
106downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

MockPlus Reader

读取和分析 MockPlus 在线设计页面。

使用方法

1. 打开 MockPlus 链接

使用 browser 工具打开 MockPlus 网页链接:

browser action=open url="<MockPlus链接>"

2. 获取页面快照

打开后获取页面内容:

browser action=snapshot targetId="<targetId>"

3. 分析内容

MockPlus 页面通常包含:

  • 项目名称 - 页面标题
  • 设计稿缩略图 - 右侧面板的项目截图
  • 组件树 - 左侧面板的页面结构
  • 交互说明 - 组件的交互描述(点击、跳转等)
  • 评论区 - 用户的反馈和评论

4. 常见 MockPlus 域名

  • https://www.mockplus.com/
  • https:// MockPlus.cn
  • https://rp.mockplus.com/

输出格式

解析后按以下格式整理信息:

## 项目信息
- 项目名称:
- 更新时间:

## 页面结构
(列出主要页面和组件)

## 交互说明
(提取关键交互流程)

## 备注
(其他重要信息)

已实现项目

基于 MockPlus 链接已生成 uni-app + Vue3 项目:

项目路径: C:\Users\Ding\.openclaw\workspace\lutixia\

已实现页面:

  • pages/index/index.vue - 开屏页
  • pages/library/library.vue - 题库首页
  • pages/practice/practice.vue - 练习页
  • pages/exam/exam.vue - AI模考页
  • pages/profile/profile.vue - 用户中心
  • pages/login/login.vue - 登录注册页

运行方式:

cd lutixia
npm install -g @dcloudio/uni-cli
npm install
npm run dev:%PLATFORM%

注意事项

  • MockPlus 页面可能需要登录才能查看完整内容
  • 某些项目链接可能有访问权限限制
  • 移动端原型可能无法完全展示交互效果

Comments

Loading comments...