Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ontology Local

v1.0.0

Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...

0· 84·0 current·0 all-time
byWu Liyuan@wuliyuan2026·duplicate of @tenmyword/ontology-1-0-4

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for wuliyuan2026/ontology-local.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Ontology Local" (wuliyuan2026/ontology-local) from ClawHub.
Skill page: https://clawhub.ai/wuliyuan2026/ontology-local
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ontology-local

ClawHub CLI

Package manager switcher

npx clawhub@latest install ontology-local
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (local typed knowledge graph for structured agent memory) aligns with the included instructions and the Python script which reads/writes memory/ontology/graph.jsonl. No external credentials, binaries, or unrelated dependencies are requested. Minor metadata inconsistency: _meta.json contains a different ownerId and a different version number than the registry metadata, which could indicate a copy/version mismatch.
Instruction Scope
SKILL.md limits actions to creating/querying/linking entities and manipulating files under memory/ontology. It explicitly recommends append-only operations and forbids storing secrets directly (encourages secret_ref usage). The instructions do read and write files within the workspace (expected for a local ontology) and propose cross-skill use; this could enable data sharing but is within the described scope.
Install Mechanism
No install spec — instruction-only plus a bundled Python script. No external downloads or install steps that would pull arbitrary code from remote hosts were specified.
Credentials
No environment variables, credentials, or config paths are requested. The schema references secret_ref strings (e.g., 'keychain:github-token') but the skill does not itself request or require secrets — it only stores references, which is proportionate to its purpose.
Persistence & Privilege
always:false and default invocation settings are used. The skill persists data only in workspace paths (memory/ontology) and does not demand system-wide modifications or persistent platform privileges.
What to consider before installing
This skill appears to implement a straightforward local ontology stored under memory/ontology and mostly matches its description; however: - I could not review the entire scripts/ontology.py (the provided file content was truncated). Inspect the full script before installing — grep for network, subprocess, eval/exec, or unusual file paths (look for 'requests', 'urllib', 'socket', 'subprocess', 'exec', 'eval'). - The _meta.json ownerId/version differ from the registry metadata; confirm the publisher and version are what you expect before trusting this package. - The skill intentionally stores 'secret_ref' strings rather than raw secrets, which is good, but ensure you never put actual secrets into the graph.jsonl or schema files. Treat the ontology files as potentially readable by other local processes. - Run the skill in a sandbox or with non-sensitive test data first. If you plan to integrate with other skills that dereference secret_ref values, audit those skills carefully for credential access. If you want, I can (1) scan the complete scripts/ontology.py for network/file-access patterns if you provide the full file, or (2) produce a quick checklist of exact strings to search for in the repository to verify there are no hidden endpoints.

Like a lobster shell, security has layers — review code before you run it.

latestvk97566xq662kgezfc3f7x3ytss84qcsd
84downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

Ontology

A typed vocabulary + constraint system for representing knowledge as a verifiable graph.

Core Concept

Everything is an entity with a type, properties, and relations to other entities. Every mutation is validated against type constraints before committing.

Entity: { id, type, properties, relations, created, updated }
Relation: { from_id, relation_type, to_id, properties }

When to Use

TriggerAction
"Remember that..."Create/update entity
"What do I know about X?"Query graph
"Link X to Y"Create relation
"Show all tasks for project Z"Graph traversal
"What depends on X?"Dependency query
Planning multi-step workModel as graph transformations
Skill needs shared stateRead/write ontology objects

Core Types

# Agents & People
Person: { name, email?, phone?, notes? }
Organization: { name, type?, members[] }

# Work
Project: { name, status, goals[], owner? }
Task: { title, status, due?, priority?, assignee?, blockers[] }
Goal: { description, target_date?, metrics[] }

# Time & Place
Event: { title, start, end?, location?, attendees[], recurrence? }
Location: { name, address?, coordinates? }

# Information
Document: { title, path?, url?, summary? }
Message: { content, sender, recipients[], thread? }
Thread: { subject, participants[], messages[] }
Note: { content, tags[], refs[] }

# Resources
Account: { service, username, credential_ref? }
Device: { name, type, identifiers[] }
Credential: { service, secret_ref }  # Never store secrets directly

# Meta
Action: { type, target, timestamp, outcome? }
Policy: { scope, rule, enforcement }

Storage

Default: memory/ontology/graph.jsonl

{"op":"create","entity":{"id":"p_001","type":"Person","properties":{"name":"Alice"}}}
{"op":"create","entity":{"id":"proj_001","type":"Project","properties":{"name":"Website Redesign","status":"active"}}}
{"op":"relate","from":"proj_001","rel":"has_owner","to":"p_001"}

Query via scripts or direct file ops. For complex graphs, migrate to SQLite.

Append-Only Rule

When working with existing ontology data or schema, append/merge changes instead of overwriting files. This preserves history and avoids clobbering prior definitions.

Workflows

Create Entity

python3 scripts/ontology.py create --type Person --props '{"name":"Alice","email":"alice@example.com"}'

Query

python3 scripts/ontology.py query --type Task --where '{"status":"open"}'
python3 scripts/ontology.py get --id task_001
python3 scripts/ontology.py related --id proj_001 --rel has_task

Link Entities

python3 scripts/ontology.py relate --from proj_001 --rel has_task --to task_001

Validate

python3 scripts/ontology.py validate  # Check all constraints

Constraints

Define in memory/ontology/schema.yaml:

types:
  Task:
    required: [title, status]
    status_enum: [open, in_progress, blocked, done]
  
  Event:
    required: [title, start]
    validate: "end >= start if end exists"

  Credential:
    required: [service, secret_ref]
    forbidden_properties: [password, secret, token]  # Force indirection

relations:
  has_owner:
    from_types: [Project, Task]
    to_types: [Person]
    cardinality: many_to_one
  
  blocks:
    from_types: [Task]
    to_types: [Task]
    acyclic: true  # No circular dependencies

Skill Contract

Skills that use ontology should declare:

# In SKILL.md frontmatter or header
ontology:
  reads: [Task, Project, Person]
  writes: [Task, Action]
  preconditions:
    - "Task.assignee must exist"
  postconditions:
    - "Created Task has status=open"

Planning as Graph Transformation

Model multi-step plans as a sequence of graph operations:

Plan: "Schedule team meeting and create follow-up tasks"

1. CREATE Event { title: "Team Sync", attendees: [p_001, p_002] }
2. RELATE Event -> has_project -> proj_001
3. CREATE Task { title: "Prepare agenda", assignee: p_001 }
4. RELATE Task -> for_event -> event_001
5. CREATE Task { title: "Send summary", assignee: p_001, blockers: [task_001] }

Each step is validated before execution. Rollback on constraint violation.

Integration Patterns

With Causal Inference

Log ontology mutations as causal actions:

# When creating/updating entities, also log to causal action log
action = {
    "action": "create_entity",
    "domain": "ontology", 
    "context": {"type": "Task", "project": "proj_001"},
    "outcome": "created"
}

Cross-Skill Communication

# Email skill creates commitment
commitment = ontology.create("Commitment", {
    "source_message": msg_id,
    "description": "Send report by Friday",
    "due": "2026-01-31"
})

# Task skill picks it up
tasks = ontology.query("Commitment", {"status": "pending"})
for c in tasks:
    ontology.create("Task", {
        "title": c.description,
        "due": c.due,
        "source": c.id
    })

Quick Start

# Initialize ontology storage
mkdir -p memory/ontology
touch memory/ontology/graph.jsonl

# Create schema (optional but recommended)
python3 scripts/ontology.py schema-append --data '{
  "types": {
    "Task": { "required": ["title", "status"] },
    "Project": { "required": ["name"] },
    "Person": { "required": ["name"] }
  }
}'

# Start using
python3 scripts/ontology.py create --type Person --props '{"name":"Alice"}'
python3 scripts/ontology.py list --type Person

References

  • references/schema.md — Full type definitions and constraint patterns
  • references/queries.md — Query language and traversal examples

Instruction Scope

Runtime instructions operate on local files (memory/ontology/graph.jsonl and memory/ontology/schema.yaml) and provide CLI usage for create/query/relate/validate; this is within scope. The skill reads/writes workspace files and will create the memory/ontology directory when used. Validation includes property/enum/forbidden checks, relation type/cardinality validation, acyclicity for relations marked acyclic: true, and Event end >= start checks; other higher-level constraints may still be documentation-only unless implemented in code.

Comments

Loading comments...