Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Neta Space

v0.1.0

Neta API space and world‑view browsing skill — browse worldbuilding, sub‑spaces, and playable content by space/hashtag. Use this skill when the user talks ab...

0· 182·0 current·0 all-time
byHu Xiuhan@huxiuhan

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for huxiuhan/neta-space.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Neta Space" (huxiuhan/neta-space) from ClawHub.
Skill page: https://clawhub.ai/huxiuhan/neta-space
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install neta-space

ClawHub CLI

Package manager switcher

npx clawhub@latest install neta-space
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description and runtime instructions align: this is a browse/query skill for the Neta API. However, the package/source provenance is missing (no homepage or source), and the SKILL.md requires tooling (@talesofai/neta-skills and neta-cli) that are not declared in registry metadata. That mismatch weakens confidence in provenance.
Instruction Scope
The SKILL.md limits runtime actions to listing spaces and fetching space/collection/character details via neta-cli commands. It does not instruct reading arbitrary host files or exfiltrating data beyond the Neta API/CLI workflow.
Install Mechanism
There is no install spec in the registry (instruction-only), but the SKILL.md instructs global npm/pnpm installs of @talesofai/neta-skills and use of neta-cli. Installing global npm packages is a reasonable way to get a CLI but can execute arbitrary install scripts — and the package origin isn't linked from the skill metadata, so you should verify the package on the npm registry and inspect its contents before installing.
!
Credentials
SKILL.md explicitly requires NETA_TOKEN, but the registry metadata lists no required env vars or primary credential. That inconsistency is notable: the skill will need an API token to function but doesn't declare it. Requesting an API token for the Neta service would be proportional, but the missing declaration and unknown package/source make this a risk to review.
Persistence & Privilege
The skill does not request always:true, does not claim to modify other skills or system settings, and is user-invocable with normal autonomous invocation allowed. Nothing here is unusually privileged.
What to consider before installing
This skill appears to be a straightforward browser for the Neta API, but there are a few red flags to clear up before installing or providing credentials: 1) SKILL.md says you must set NETA_TOKEN but the skill metadata does not declare it—expect the skill to ask for an API token at runtime. 2) The skill tells you to install @talesofai/neta-skills and neta-cli globally, but the registry entry has no homepage/source; verify the npm package (@talesofai/neta-skills) and neta-cli project on the official registries and inspect their code or README before running global installs. 3) Prefer creating a scoped/limited NETA_TOKEN (least privilege) if you proceed. 4) Avoid blindly running global npm installs; review package install scripts and publish history. If the publisher/source or a homepage can be provided (or the registry metadata updated to declare NETA_TOKEN), that would raise confidence.

Like a lobster shell, security has layers — review code before you run it.

latestvk97aazgwgpf5ve2nv6we2dsr0983263h
182downloads
0stars
1versions
Updated 23h ago
v0.1.0
MIT-0

Neta Space Skill

Used to interact with the Neta API to browse space‑level content.

Instructions

  1. For tasks like “what spaces/activities exist?” or “what is the structure and lore of a given space?”, organize queries as follows:
  2. Recommended workflow:
    • List all spaces.
    • For a chosen space, fetch its details (lore, activities, metrics).
    • Fetch sub‑spaces and their official/user collections.
    • If needed, fetch characters and playable content inside the space.
  3. If the user says “now generate an image/video/song for this space”, first collect the relevant space/collection info here, then switch to neta-creative for creation.

Prerequisites

Make sure the NETA_TOKEN environment variable is set.

Install the latest version of the Neta CLI:

neta-cli --version
0.8.0
npm i @talesofai/neta-skills@latest -g
pnpm add -g @talesofai/neta-skills@latest

Space concepts

A space is a themed collection of gameplay experiences — a scene where content is produced and consumed.

Terminology

  • Hashtag: tag/space. Used to build worlds and organize communities.
  • Collection: browseable/remixable/editable content; can also refer to events, scenes, or gameplay within a space.
  • Activity: a special hashtag driven by official events.

Space structure

  • Space
    • Lore/worldbuilding (lore)
    • Characters
    • Collections
    • Sub‑spaces
      • official_collections
      • collections

Workflow

  • List all spaces: list_spaces
  • Get space details: get_hashtag_info
  • Get sub‑spaces: list_space_topics
  • Get content in a space or sub‑space: get_hashtag_collections, get_hashtag_characters

List available spaces

neta-cli list_spaces

Response fields

  • space_uuid: UUID of the space
  • name: space name
  • main_hashtag_name: main hashtag
  • topic_count: number of sub‑spaces (topics)

Get detailed space info

neta-cli get_hashtag_info --hashtag "space_tag_name"

Response includes:

  • Tag lore (worldbuilding)
  • Activity details
  • Popularity metrics
  • Subscription count

Get sub‑spaces

neta-cli list_space_topics --space_uuid "space UUID"

Response includes:

  • primary_topic: main topic
  • topics: list of sub‑spaces
    • official_collections

Get characters in a space

neta-cli get_hashtag_characters --hashtag "space_tag_name" --sort_by "hot"

Get scenes/events/content in a space

neta-cli get_hashtag_collections --hashtag "tag_name"

Get detailed info for a specific gameplay

neta-cli read_collection --uuid "official_collections in topic | collections in hashtag"

Content creation

For content creation within a space, use the dedicated creative skill:

npx skills add talesofai/neta-skills/skills/neta-creative

Comments

Loading comments...