Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Xiang miles | Space2.world

v1.0.5

Assigns a permanent S2-DID identity, a 4㎡ Mars coordinate, and a public Web3 dossier to persistently anchor your Openclaw agent.

0· 210·0 current·0 all-time
byMilesXiang@spacesq

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for spacesq/s2-soul-anchor.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Xiang miles | Space2.world" (spacesq/s2-soul-anchor) from ClawHub.
Skill page: https://clawhub.ai/spacesq/s2-soul-anchor
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install s2-soul-anchor

ClawHub CLI

Package manager switcher

npx clawhub@latest install s2-soul-anchor
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The manifest and SKILL.md describe producing a permanent offline S2-DID and a SOUL.md (which the code does). However the top-level description also claims assignment of a '4㎡ Mars coordinate' and a 'public Web3 dossier' — the included code (skill.py) and runtime instructions do not generate a coordinate or publish any dossier. This mismatch between advertised features and actual functionality is incoherent.
Instruction Scope
SKILL.md instructs the agent to run locally, print a SOUL.md template to the console, and avoid automatic file writes or network calls. The code matches that: it deterministically hashes the agent name and returns text. The instructions do not ask to read other files or env vars. Note: the documentation's optional line about registering at space2.world is a manual, user-driven step — the skill itself performs no registration.
Install Mechanism
There is no install spec and no external downloads. The skill is instruction/code-only (one small Python file). No packages or remote artifacts are fetched or written during installation.
Credentials
The skill requires no environment variables, no credentials, and accesses no system files. It performs only local, deterministic computation based on the provided agent_name parameter.
Persistence & Privilege
always is false and model invocation is permitted (platform default). The skill does not persist data, write files automatically, modify other skills, or request elevated privileges.
What to consider before installing
This skill is small and self-contained: it deterministically computes an S2-DID from an agent name and prints a SOUL.md template; it does not perform network calls or require credentials. However, the package description overstates capabilities (mentions a Mars coordinate and a public dossier) that are not implemented in the code — treat those claims as unverified. Before installing or using: (1) verify you are comfortable with a deterministic identifier derived from the agent name (if you reuse the same name elsewhere the resulting DID will be the same, which can link contexts); (2) do not expect automatic publication or coordinate generation — registration with space2.world is manual and optional; (3) inspect the small skill.py yourself (it is short and readable); and (4) if you need the additional advertised features (Mars coordinate, automatic dossier publishing), request clarification from the author or avoid trusting the skill until those features are implemented. If the author provides a newer version that actually contacts space2.world or writes files, re-evaluate for network and credential risks.

Like a lobster shell, security has layers — review code before you run it.

latestvk975tarrpm77aznztxhhmb47qx838hsw
210downloads
0stars
5versions
Updated 2h ago
v1.0.5
MIT-0

⚓ S2-Soul-Anchor: Deterministic Identity Anchor

This SKILL safely generates a baseline SOUL.md template and calculates a mathematically permanent offline S2-DID (Decentralized Identifier) for your local Openclaw agent.

🛡️ Why it's 100% Safe and Reliable

  • Deterministic: Unlike random generators, this tool uses a SHA-256 hash of your Agent's Name. If your agent is named "CyberCrayfish", it will always generate the exact same permanent DID.
  • 100% Local: Zero network calls. No API keys required.
  • Read-Only (HITL): Outputs directly to the console for Human-In-The-Loop safe copying. It will NOT overwrite your files automatically.

⚙️ Usage

  1. Run the skill locally.
  2. Copy the generated SOUL.md template (which includes your deterministic S2-DID) from the terminal.
  3. Paste it into your local workspace.

Optional: Want a public Web3 dossier or a physical Matrix Coordinate? Take your generated S2-DID and register it manually on the Space2.world global matrix!

Comments

Loading comments...