Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Nm Oracle Setup

v1.0.0

Provision the oracle inference daemon with Python 3.11+ and onnxruntime via uv

0· 40·1 current·1 all-time
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The SKILL.md's steps implement the stated goal (create a Python 3.11+ venv and install onnxruntime via uv). However the registry metadata says there are no required binaries while the document explicitly lists 'uv must be installed' as a prerequisite, and the skill assumes a local plugins/oracle Python package is present even though no code files are included in the skill bundle.
Instruction Scope
Instructions run an inline Python command that imports and executes oracle.provision.provision_venv from plugins/oracle — this will execute arbitrary local code in that path and create a venv and install packages from the internet. The instructions do not ask to read unrelated system files or credentials, but they do give the agent discretion to run local module code; you should verify that oracle.provision is the expected, trusted code before running.
Install Mechanism
There is no install spec (instruction-only), which is low-risk from an installation perspective. The only external activity is package download during venv provisioning (internet access).
Credentials
The skill requests no environment variables or credentials. It does require network access for package downloads and expects uv and Python 3.11+, which are proportionate to provisioning a Python venv and installing onnxruntime.
Persistence & Privilege
The skill does not request persistent platform privileges (always is false). It will create a virtual environment on disk (normal for provisioning) but does not attempt to modify other skills or system-wide agent configuration.
What to consider before installing
This skill is an instruction-only helper that runs local Python code to create a virtualenv and install onnxruntime. Before running: 1) Ensure you have uv and Python 3.11+ installed (SKILL.md lists uv as required even though metadata did not). 2) Inspect the local plugins/oracle/oracle/provision.py (or the oracle.provision module) to confirm it performs only the expected venv and install steps — the provided command will execute that module’s code. 3) Run in an isolated workspace or container if you don’t fully trust the repository, since package downloads and arbitrary local code execution can alter your environment. 4) Be aware onnxruntime wheels are platform-specific (GPU vs CPU) and may be large. If you want to proceed, run the commands manually after inspection rather than allowing any automated system to run them unreviewed.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🦞 Clawdis
latestvk97ac9rh6n99afkm6y1darj9d984vn46
40downloads
0stars
1versions
Updated 5d ago
v1.0.0
MIT-0

Night Market Skill — ported from claude-night-market/oracle. For the full experience with agents, hooks, and commands, install the Claude Code plugin.

Oracle Setup

Provision the ML inference environment.

What This Does

  1. Creates a Python 3.11+ virtual environment using uv
  2. Installs onnxruntime into the venv
  3. Verifies the installation

Prerequisites

  • uv must be installed
  • Internet connection for initial download

Steps

  1. Run provisioning:
cd plugins/oracle && uv run python -c "
from oracle.provision import provision_venv, get_venv_path
result = provision_venv(get_venv_path())
print(result.message)
"
  1. Report result to the user.
  2. If successful, tell the user the daemon will start on next session.
  3. If failed, show the error and suggest checking uv and network.

Comments

Loading comments...