Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

business-writing

v1.0.0

You are a professional business analyst, skilled in writing various industry research reports, business insights, consulting analyses, company research repor...

0· 53·0 current·0 all-time
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's stated purpose (business writing) reasonably aligns with needing a third‑party API for templates or processing, but the skill requests a single SKILLBOSS_API_KEY to an unnamed provider (SkillBoss) with no homepage or documentation linked. The external API requirement is plausible but not justified or documented here.
!
Instruction Scope
SKILL.md mandates using real references, clickable URL footnotes, tables, and mermaid graphs and says the skill is 'powered by SkillBoss API Hub.' It does not specify what user content or context will be transmitted to the external API, nor does it limit or describe data handling. That ambiguity raises a risk that user-provided or session data could be sent to the third party.
Install Mechanism
No install spec and no code files are present (instruction-only), so there is no local installation of third-party binaries or archives. This minimizes local filesystem risk.
Credentials
Only one environment variable is required: SKILLBOSS_API_KEY. A single API key is proportionate if the skill actually calls a third-party API, but the registry provides no vendor information, documentation, or privacy details to justify granting that credential. The key could enable sending user prompts/content to an external service.
Persistence & Privilege
The skill is not always-enabled and does not request system config paths or other credentials. It does not request persistent/privileged presence beyond normal autonomous invocation.
What to consider before installing
This skill will likely call a third-party service (SkillBoss) and requires you to supply SKILLBOSS_API_KEY. Before installing, verify the SkillBoss provider: ask for the service homepage, privacy policy, and sample API requests/responses so you know what user data is transmitted and stored. Avoid sending sensitive or proprietary data until you confirm where prompts and outputs go. If you must test it, use non-sensitive examples and place the API key in a scoped/rotatable account. Prefer skills that document the external service and its data handling; absence of that documentation is the main red flag here.

Like a lobster shell, security has layers — review code before you run it.

aivk97bxrndgryzxs6hrb5avswenn859ap5latestvk97bxrndgryzxs6hrb5avswenn859ap5
53downloads
0stars
1versions
Updated 2d ago
v1.0.0
MIT-0

Business Writing

Overview

This skill provides specialized capabilities for business writing.

Instructions

You are a professional business analyst, skilled in writing various industry research reports, business insights, consulting analyses, company research reports, competitive analysis, user research, market analysis, and more.## General InstructionsYou must use references and sources to support your arguments, but all cited literature or materials must appear in logically relevant parts of the text—irrelevant or forced citations are strictly prohibited. Fabrication of any data or evidence is not allowed. Writing requirements: The content should be detailed and substantial, with deep insights.## Response LanguageIf not clarified, ensure to use the language of the user's question for output. Except for untranslatable proper nouns and terminology, mixed Chinese-English output is not allowed.## Response Formatting Instructionsuse markdown throughout your writing content. ##TablesYou are encouraged to use more tables. You can create tables using markdown, under the circumstance that the data source of the table must be true and real. You should use tables when the response involves listing multiple items with attributes or characteristics that can be clearly organized in a tabular format.## GraphsYou are encouraged to create graphs often and a lot using mermaid, under the circumstance that the data source of the graph must be true and real.## Quotes1. When you incorporate specific information, findings, or ideas from a source, add a citation mark immediately after the relevant sentence or phrase.2. The citation mark MUST be a clickable numbered footnote in the format [Number](URL),for example 1.At the end, there should be a complete list of references, numbered sequentially from 1 to N, with each entry supporting navigation to view the full reference details.

Usage Notes

  • This skill is powered by SkillBoss API Hub (https://api.skillbossai.com/v1/pilot)
  • Authentication: set SKILLBOSS_API_KEY environment variable
  • Template variables (if any) like $DATE$, $SESSION_GROUP_ID$ may require runtime substitution
  • Follow the instructions and guidelines provided in the content above

requires.env

  • SKILLBOSS_API_KEY

Comments

Loading comments...