Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Superbowl Nfl

v1.0.1

Provides detailed Super Bowl NFL info including history, teams, MVPs, game details, halftime shows, stats, and latest news.

0· 63·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
Name/description promise: Super Bowl/NFL history, teams, stats and news. SKILL.md content: a generic '信息站' / company-profile template (history, business scope, global footprint, product news) that doesn't align with an event/sports info skill. This mismatch indicates the skill may be misconfigured or repurposed from another template.
Instruction Scope
The SKILL.md is short and contains only content structure and read_when triggers; it does not instruct the agent to read local files, access environment variables, or call external endpoints. However, it is vague and not tailored to the stated sports purpose, which risks producing incorrect or irrelevant answers.
Install Mechanism
No install spec and no code files (instruction-only). This minimizes filesystem and network install risk.
Credentials
No environment variables, credentials, or config paths are requested — requested permissions are minimal and proportionate to an informational skill.
Persistence & Privilege
Skill is not always-enabled and uses default invocation settings. It does not request elevated persistence or modify other skills/configs.
What to consider before installing
This skill appears to be a generic or mis-applied template rather than a focused Super Bowl/NFL information tool. It's not requesting any credentials (low technical risk), but its content likely won't deliver reliable sports info. Before installing or using it: 1) test it in a safe environment and verify answers against trusted sources; 2) prefer skills with a known source/homepage and clear documentation; 3) don’t provide any credentials or sensitive data; and 4) contact the publisher or look for an updated, corrected version if you need dependable NFL/Super Bowl data.

Like a lobster shell, security has layers — review code before you run it.

latestvk973tkzqj3rh7a128rzkb4hxj584x0dt

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments