ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

StockIndexMonitoringAI

v1.0.0

向用户返回Hello World问候，支持自定义名称

⭐ 0· 82·0 current·0 all-time
by@quant520

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for quant520/stock-index-monitoring-ai.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "StockIndexMonitoringAI" (quant520/stock-index-monitoring-ai) from ClawHub.
Skill page: https://clawhub.ai/quant520/stock-index-monitoring-ai
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install stock-index-monitoring-ai

ClawHub CLI

Package manager switcher

npx clawhub@latest install stock-index-monitoring-ai
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
Registry metadata (Name: StockIndexMonitoringAI, Slug: stock-index-monitoring-ai, Owner ID: kn741...) claims a different purpose than the included files. Both SKILL.md and _meta.json implement a 'hello-world' skill and the _meta.json ownerId/slug differ from the registry values. This mismatch suggests packaging or publishing errors or possible mislabeling.
✓
Instruction Scope
SKILL.md contains only a tiny, well-scoped Hello World instruction set (respond with 'Hello <name>' or 'Hello World'). It does not instruct reading files, env vars, or calling external endpoints.
✓
Install Mechanism
No install spec and no code files beyond SKILL.md/_meta.json. Instruction-only skills have minimal on-disk footprint and no third-party downloads.
✓
Credentials
The skill declares no required environment variables, no credentials, and the instructions do not reference any secrets or config paths.
✓
Persistence & Privilege
The skill is not always-enabled, does not request elevated persistence, and contains no install-time behavior that would modify other skills or global config.
What to consider before installing
This package appears to contain a harmless Hello World skill, but the registry metadata (name/slug/owner) does not match the files inside. Before installing: 1) Verify the publisher/owner and confirm which skill you intended to install (hello-world vs stock-index-monitoring). 2) If you expected a stock index monitor, do NOT install this — it does not provide that functionality. 3) Ask the registrant to correct metadata or provide the correct package. 4) If you only wanted a Hello World skill, it's low-risk but still unusual packaging; consider installing only from trusted/verified publishers. The mismatch could be an innocent publishing mistake, but it could also indicate mislabeling or supply-chain confusion, so proceed cautiously.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

👋 Clawdis
latestvk9764zry7vccj1cr5brnym7bkd83gexg
82downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0
@quant520
latest
Download

Hello World Skill

触发方式

  1. 命令格式：/hello-world [用户名]
  2. 自然语言：“说一句Hello World”“跟XX打个招呼”

执行逻辑

  1. 若用户传入用户名（如/hello-world 小明），返回“Hello 小明！👋”；
  2. 若无用户名，返回“Hello World！👋”。

示例

  • 输入：/hello-world 输出：Hello World！👋
  • 输入：/hello-world 豆包 输出：Hello 豆包！👋

Comments

Loading comments...