ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Table Image

v1.0.0

Generate images from tables for better readability in messaging apps like Telegram. Use when displaying tabular data.

⭐ 0· 2.7k·16 current·18 all-time
by@joargp
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill's stated purpose (rendering tables to images) matches the runtime instructions which install and use the tablesnap tool. However, the manifest does not declare required binaries (the instructions require the Go toolchain and git), so the declared requirements are incomplete.
✓
Instruction Scope
SKILL.md stays on-topic: it instructs installing/building tablesnap, piping markdown tables to the tablesnap binary, producing an image file (e.g., /tmp/table.png), and sending it via MEDIA:. It does reference filesystem paths (/tmp) and a one-time emoji download via tablesnap, which are consistent with the skill's goal.
ℹ
Install Mechanism
There is no formal install spec in the manifest; instead the instructions recommend 'go install' or cloning the GitHub repo and building. Downloading/building from https://github.com/joargp/tablesnap is a common pattern and uses a well-known host, but building/executing code fetched at runtime writes binaries to disk and requires the Go toolchain.
✓
Credentials
The skill requests no environment variables, credentials, or config paths — appropriate for a local rendering tool. There is no apparent need for additional secrets or unrelated credentials.
✓
Persistence & Privilege
always:false and normal invocation behavior. The skill's instructions will create a binary (when the user follows the build/install steps) and write image files (e.g., /tmp/table.png), but it does not request persistent agent-wide privileges or modify other skills.
Assessment
This skill is an instruction-only wrapper around the open-source tablesnap tool and is coherent with its description. Before installing: ensure you have the Go toolchain and git available (the SKILL.md omits these as required binaries); review the tablesnap GitHub repo to confirm you trust the code you will build and run; prefer installing a pinned release rather than 'latest' if you need reproducibility; be aware that building from source and running the binary will execute code retrieved from the internet and will write files (binaries and /tmp images) to your system; the optional 'tablesnap emojis install' will download emoji assets — verify that destination and contents if you care about network downloads.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f5xhbck93xhyk8wfa9ptjsn7ymh8d

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📊 Clawdis

Comments