Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

StitchFlow Legacy Alias

v1.3.0

Legacy compatibility alias for StitchFlow. Use when a user explicitly references stitch-design-local, or when older prompts and setups still call that skill...

0· 194·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for yshishenya/stitch-design-local.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "StitchFlow Legacy Alias" (yshishenya/stitch-design-local) from ClawHub.
Skill page: https://clawhub.ai/yshishenya/stitch-design-local
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install stitch-design-local

ClawHub CLI

Package manager switcher

npx clawhub@latest install stitch-design-local
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description state this is a backward-compatibility alias and the SKILL.md simply redirects to the canonical 'stitchflow' workflow and toolkit; no unrelated capabilities, binaries, or credentials are requested.
Instruction Scope
The SKILL.md instructs the agent to read ../stitchflow/SKILL.md and to use the toolkit at ${STITCH_STARTER_ROOT:-$HOME/.agents/stitch-starter}. That means the agent will consult another skill's files and an on-disk toolkit; this is expected for an alias but it does reference filesystem paths and an environment variable not declared in metadata.
Install Mechanism
Registry metadata shows no install spec (instruction-only), but the SKILL.md contains an 'install: "bash install.sh --target all"' line. There is no bundled install script in this skill, so the line is an instruction/placeholder pointing to the canonical skill's install rather than an actual installer here.
Credentials
The skill declares no required env vars, yet SKILL.md references STITCH_STARTER_ROOT and $HOME as the default toolkit path. This is proportionate to a local-toolkit workflow but is a mismatch between declared requirements and referenced environment variables.
Persistence & Privilege
Flags show no 'always' privilege and autonomous invocation is allowed by default. The skill does not request persistent or system-wide privileges.
Assessment
This skill is a thin compatibility alias that tells the agent to follow the canonical StitchFlow skill and to use a local toolkit path (defaults to ~/.agents/stitch-starter). Before enabling: (1) verify the canonical 'stitchflow' skill and its SKILL.md exist and are trustworthy, (2) inspect any install.sh or toolkit contents before running them, and (3) be aware the alias may read sibling skill files and the toolkit directory (and it references STITCH_STARTER_ROOT and $HOME). If you don't trust the canonical skill or the toolkit path, do not enable this alias.

Like a lobster shell, security has layers — review code before you run it.

deprecatedvk975m1wzgenq4s64dxre8sqwex837ks0designvk975m1wzgenq4s64dxre8sqwex837ks0latestvk975m1wzgenq4s64dxre8sqwex837ks0legacyvk975m1wzgenq4s64dxre8sqwex837ks0openclawvk975m1wzgenq4s64dxre8sqwex837ks0stitchvk975m1wzgenq4s64dxre8sqwex837ks0uivk975m1wzgenq4s64dxre8sqwex837ks0
194downloads
0stars
6versions
Updated 4h ago
v1.3.0
MIT-0

Legacy Alias: stitch-design-local

This skill name is kept only for backward compatibility.

Canonical skill:

  • stitchflow

If this alias is invoked, follow the same workflow and rules as the canonical StitchFlow skill:

  • Read ../stitchflow/SKILL.md
  • Use the same toolkit at ${STITCH_STARTER_ROOT:-$HOME/.agents/stitch-starter}
  • Prefer the stitchflow name in new prompts, docs, and examples

Migration note

  • old name: stitch-design-local
  • current name: stitchflow

Comments

Loading comments...