Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Presentation Hook

v1.0.0

Creates engaging opening statements and powerful closings for medical.

0· 92·0 current·0 all-time
byAIpoch@aipoch-ai

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for aipoch-ai/presentation-hook.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Presentation Hook" (aipoch-ai/presentation-hook) from ClawHub.
Skill page: https://clawhub.ai/aipoch-ai/presentation-hook
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install presentation-hook

ClawHub CLI

Package manager switcher

npx clawhub@latest install presentation-hook
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name and description match the actual capability: the packaged Python class generates short opening/closing hooks for medical topics. No unrelated credentials or binaries are requested.
!
Instruction Scope
SKILL.md instructs users to run the packaged script with inputs, edit a CONFIG block, and use input/output paths; however, scripts/main.py contains a simple generator with a hard-coded main() and no CLI or file-read/write logic. The instructions therefore overstate the script's runtime behavior and grant the agent implied permissions (file I/O, configurable execution) that aren't implemented.
Install Mechanism
No install spec is provided (instruction-only packaging with a small helper script). Nothing is downloaded or extracted; risk from installation mechanism is low.
Credentials
The skill requests no environment variables, credentials, or config paths and the code does not access any secrets or external services. Requested access is proportionate to the stated purpose.
Persistence & Privilege
always is false and there is no code that modifies agent configuration or requests persistent presence. The skill does not request elevated privileges.
What to consider before installing
This package appears to be a small, local hook generator and does not contact external services or request credentials — that lowers risk. However, the documentation promises CLI parameters, configurable input/output handling, and file operations that the included script does not actually implement; this mismatch is likely sloppy packaging rather than malicious but you should verify before running. Recommended steps: (1) Inspect scripts/main.py (it is short and readable) and confirm it does only string construction (no network, no file writes). (2) If you need CLI or file I/O, modify the script yourself or ask the author for the intended implementation. (3) Run it in a sandbox or isolated environment first (python -m py_compile scripts/main.py; then run it) and avoid passing any protected health information (PHI) into the tool unless you confirm it handles PHI according to your policies. (4) If you plan to let an agent invoke this autonomously, be aware the SKILL.md claims more capabilities than present — ensure the agent won't attempt file operations the script can't handle.

Like a lobster shell, security has layers — review code before you run it.

latestvk97afxvbgrgbm9fsfnqnqccva183xr06
92downloads
0stars
1versions
Updated 4w ago
v1.0.0
MIT-0

Presentation Hook

Crafts presentation openings and closings.

When to Use

  • Use this skill when the task needs Creates engaging opening statements and powerful closings for medical.
  • Use this skill for other tasks that require explicit assumptions, bounded scope, and a reproducible output format.
  • Use this skill when the response must stay inside the documented task boundary instead of expanding into adjacent work.

Key Features

See ## Features above for related details.

  • Scope-focused workflow aligned to: Creates engaging opening statements and powerful closings for medical.
  • Packaged executable path(s): scripts/main.py.
  • Reference material available in references/ for task-specific guidance.
  • Structured execution path designed to keep outputs consistent and reviewable.

Dependencies

See ## Prerequisites above for related details.

  • Python: 3.10+. Repository baseline for current packaged skills.
  • Third-party packages: not explicitly version-pinned in this skill package. Add pinned versions if this skill needs stricter environment control.

Example Usage

cd "20260318/scientific-skills/Academic Writing/presentation-hook"
python -m py_compile scripts/main.py
python scripts/main.py --help

Example run plan:

  1. Confirm the user input, output path, and any required config values.
  2. Edit the in-file CONFIG block or documented parameters if the script uses fixed settings.
  3. Run python scripts/main.py with the validated inputs.
  4. Review the generated output and return the final artifact with any assumptions called out.

Implementation Details

See ## Workflow above for related details.

  • Execution model: validate the request, choose the packaged workflow, and produce a bounded deliverable.
  • Input controls: confirm the source files, scope limits, output format, and acceptance criteria before running any script.
  • Primary implementation surface: scripts/main.py.
  • Reference guidance: references/ contains supporting rules, prompts, or checklists.
  • Parameters to clarify first: input path, output path, scope filters, thresholds, and any domain-specific constraints.
  • Output discipline: keep results reproducible, identify assumptions explicitly, and avoid undocumented side effects.

Quick Check

Use this command to verify that the packaged script entry point can be parsed before deeper execution.

python -m py_compile scripts/main.py

Audit-Ready Commands

Use these concrete commands for validation. They are intentionally self-contained and avoid placeholder paths.

python -m py_compile scripts/main.py
python scripts/main.py

Workflow

  1. Confirm the user objective, required inputs, and non-negotiable constraints before doing detailed work.
  2. Validate that the request matches the documented scope and stop early if the task would require unsupported assumptions.
  3. Use the packaged script path or the documented reasoning path with only the inputs that are actually available.
  4. Return a structured result that separates assumptions, deliverables, risks, and unresolved items.
  5. If execution fails or inputs are incomplete, switch to the fallback path and state exactly what blocked full completion.

Features

  • Attention-grabbing openings
  • Memorable closings
  • Audience-specific hooks
  • Storytelling elements

Input Parameters

ParameterTypeRequiredDescription
topicstrYesPresentation topic
audiencestrYesTarget audience
typestrYes"opening" or "closing"

Output Format

{
  "hook": "string",
  "alternative_hooks": ["string"]
}

Risk Assessment

Risk IndicatorAssessmentLevel
Code ExecutionPython/R scripts executed locallyMedium
Network AccessNo external API callsLow
File System AccessRead input files, write output filesMedium
Instruction TamperingStandard prompt guidelinesLow
Data ExposureOutput files saved to workspaceLow

Security Checklist

  • No hardcoded credentials or API keys
  • No unauthorized file system access (../)
  • Output does not expose sensitive information
  • Prompt injection protections in place
  • Input file paths validated (no ../ traversal)
  • Output directory restricted to workspace
  • Script execution in sandboxed environment
  • Error messages sanitized (no stack traces exposed)
  • Dependencies audited

Prerequisites

No additional Python packages required.

Evaluation Criteria

Success Metrics

  • Successfully executes main functionality
  • Output meets quality standards
  • Handles edge cases gracefully
  • Performance is acceptable

Test Cases

  1. Basic Functionality: Standard input → Expected output
  2. Edge Case: Invalid input → Graceful error handling
  3. Performance: Large dataset → Acceptable processing time

Lifecycle Status

  • Current Stage: Draft
  • Next Review Date: 2026-03-06
  • Known Issues: None
  • Planned Improvements:
    • Performance optimization
    • Additional feature support

Output Requirements

Every final response should make these items explicit when they are relevant:

  • Objective or requested deliverable
  • Inputs used and assumptions introduced
  • Workflow or decision path
  • Core result, recommendation, or artifact
  • Constraints, risks, caveats, or validation needs
  • Unresolved items and next-step checks

Error Handling

  • If required inputs are missing, state exactly which fields are missing and request only the minimum additional information.
  • If the task goes outside the documented scope, stop instead of guessing or silently widening the assignment.
  • If scripts/main.py fails, report the failure point, summarize what still can be completed safely, and provide a manual fallback.
  • Do not fabricate files, citations, data, search results, or execution outcomes.

Input Validation

This skill accepts requests that match the documented purpose of presentation-hook and include enough context to complete the workflow safely.

Do not continue the workflow when the request is out of scope, missing a critical input, or would require unsupported assumptions. Instead respond:

presentation-hook only handles its documented workflow. Please provide the missing required inputs or switch to a more suitable skill.

Response Template

Use the following fixed structure for non-trivial requests:

  1. Objective
  2. Inputs Received
  3. Assumptions
  4. Workflow
  5. Deliverable
  6. Risks and Limits
  7. Next Checks

If the request is simple, you may compress the structure, but still keep assumptions and limits explicit when they affect correctness.

Comments

Loading comments...