Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Spc

Statistical process control chart generator. Use when json spc tasks, csv spc tasks, checking spc status.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 13 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
Name/description describe a 'Statistical process control chart generator', but the bundled script only records entries, lists/searches them, exports JSON/CSV, and shows simple counts/size. There is no chart generation, plotting, or SPC calculations (control limits, R/̄x charts, etc.). This is a functional mismatch between advertised capability and actual behavior.
Instruction Scope
SKILL.md directs the agent to run scripts/script.sh with a small set of commands. The script operates only on a local data directory (default ~/.spc or SPC_DIR if set), reading/writing data.jsonl and config.txt. It does not perform network calls, read other system files, or reference unrelated environment variables. It writes to the user's home directory (documented in help), so its runtime behavior stays within a limited local scope.
Install Mechanism
No install spec; the skill is instruction-only with one included shell script. Nothing is downloaded or written beyond the script's normal local file operations.
Credentials
No required environment variables are declared in the registry metadata. The script optionally uses SPC_DIR to override the data directory; SPC_DIR is documented in SKILL.md. The use of SPC_DIR is proportionate to the task. (Minor note: SPC_DIR is not listed as a required env var in the metadata — it's optional and documented in the SKILL.md.)
Persistence & Privilege
The skill is not forced-always, does not request elevated privileges, and only writes to a per-user data directory (default ~/.spc). It does not modify other skills or system-wide agent configuration.
What to consider before installing
This skill is a small local data manager (adds, lists, searches, exports entries to ~/.spc by default). Important things to consider before installing: - Expectation mismatch: despite the name/description, the script does NOT generate SPC charts or compute control limits — if you need plotting or SPC analysis, this skill won't provide it. Review or extend the script if charting is required. - Data location: it creates and modifies files under ~/.spc (data.jsonl, config.txt). Don't store secrets or sensitive data there. You can set SPC_DIR to change storage location. - Safety: there are no network calls or credential requests in the code, so it does not appear to exfiltrate data. However, review the script yourself (or run it in a sandbox) if you have high security requirements. - Portability: the script uses sed -i and other utilities that behave differently on some platforms (e.g., macOS BSD sed). Test on your target OS. If you still want this functionality, it's reasonable to use, but do not rely on it for chart generation without inspecting or extending the code.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk9774507ybsvwvddv8fgv20trn8388r9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

spc

Statistical process control chart generator. Use when json spc tasks, csv spc tasks, checking spc status.

Commands

status

scripts/script.sh status

Show current status

add

scripts/script.sh add

Add new entry

list

scripts/script.sh list

List all entries

search

scripts/script.sh search

Search entries

remove

scripts/script.sh remove

Remove entry by number

export

scripts/script.sh export

Export data to file

stats

scripts/script.sh stats

Show statistics

config

scripts/script.sh config

View or set config

help

scripts/script.sh help

version

scripts/script.sh version

Configuration

Use scripts/script.sh config <key> <value> to set preferences.

VariableDescription
SPC_DIRData directory (default: ~/.spc/)

Powered by BytesAgain | bytesagain.com | hello@bytesagain.com

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…