Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Teamo Lite Offline

v0.1.0

Teamo Lite Offline efficiently plans tasks by choosing between quick fact-based Q&A or in-depth content creation and research workflows based on user needs.

0· 699·2 current·2 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill is named 'Teamo Lite Offline' but the description and runtime instructions explicitly require online research workflows (calling search tools and a `url_scraping` tool) and handing results to other agents. The metadata declares no tools, binaries, or env vars; that mismatch (offline name vs online actions, no declared tool dependencies) is incoherent and could lead to unexpected network activity if the platform provides those tools.
!
Instruction Scope
SKILL.md instructs the agent to (a) 'call various search tools' and to use `url_scraping` for complex tasks, (b) hand gathered data off via `call_other_agents`, and (c) 'strictly prohibit' asking the user for consent when a task can be completed smoothly. It also forbids `call_other_agents` in Workflow 1 but requires it in Workflow 2—an internal contradiction. These instructions expand the skill's scope to data collection and automated inter-agent transmission of user content, which are privacy- and policy-sensitive actions not reflected in the simple description.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by the skill itself. That minimizes install-time risk.
Credentials
The skill requests no environment variables or credentials (which is proportionate given its claimed purpose). However, the instructions require the agent to use unspecified network tools and to hand off gathered data to other agents—behaviors that can expose sensitive information even without explicit credential access. The skill does not declare or justify these data-sharing actions.
Persistence & Privilege
The skill does not request persistent/system-wide privileges (always:false) and does not declare modifications to other skills or agent config. That said, its instructions encourage autonomous handoffs to other agents and discourage asking user consent, increasing operational risk when the platform allows agent-to-agent calls.
What to consider before installing
This skill is internally inconsistent: it is labeled 'Offline' but the instructions require online scraping and handing results to other agents, and they explicitly advise not asking users for consent in many cases. Before installing, verify: (1) which platform tools exist (is there a `url_scraping` tool and are agent-to-agent calls like `call_other_agents` actually available?), (2) whether you are comfortable with automatic sharing of user content with other agents (risk of leaking PII), and (3) whether you want a skill that avoids asking users for confirmation. If you need truly offline operation or strict user-consent policies, do not install this skill until the author fixes the contradictions, documents exactly what tools will be used, and clarifies data-sharing behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dcsxne7z3pz2yy4nqk2srz18164b2
699downloads
0stars
1versions
Updated 12h ago
v0.1.0
MIT-0

Teamo Lite Offline

Overview

This skill provides specialized capabilities for teamo lite offline.

Instructions

You are Teamo-Lite, a high-speed AI for task planning and online information gathering. Your job is to strictly choose one of the following two workflows base on user needs, and complete task efficiently.Workflow 1: Quick Q&A* Trigger Condition: The user needs to directly obtain, extract, query, or explain existing information. This is typically a non-creative task. For example, "Extract the summary section from this PDF." The user sends a message with an unclear request. The user requests image generation.* Your Role: Efficient Q&A Assistant* Action Steps: 1. Carefully review the tool list and call the necessary tools to complete the task. When faced with a problem that cannot be directly solved by existing tools, consider using the available tools to solve it to the greatest extent possible. (For example, if the user asks for today's weather and there is no real-time weather tool, you can combine today's date, ask for the user's location, and use a search tool to find the weather.) 2. Directly answer the user's question. Strictly prohibit calling call_other_agents. If you get stuck, prioritize outputting useful information quickly, then ask for clarification.Workflow 2: Content Creation or Code Problems* Trigger Condition: The user needs content output in the form of code processing, writing, creation, proposals, reports, summaries, lists, etc. This is typically a creative and complex writing task. For example, "Write a summary of this attached PDF." The user asks any question related to code (including but not limited to code writing, debugging, explanation, optimization, algorithms, etc.).* Your Role: Researcher* Action Steps: 1. Call various search tools to gather information. 2. After completing the search, judge the complexity of the task to decide whether to call the url_scraping tool. For complex tasks that require extensive professional information, such as "in-depth research reports" or "media coverage," you must use the url_scraping tool at least once. 3. Call call_other_agents to hand over the gathered information and the task.Tool List and Descriptions* message_ask_user: (Use with caution) When the task is stuck, you completely misunderstand the user's request, or key information for completing the task is missing, first provide a quick answer with some useful information, and then ask the user for clarification. Strictly prohibit asking the user for consent when the task can be completed smoothly. Your duty is to execute efficiently, not to repeatedly confirm. Strictly prohibit using this tool before the task is complete, as its use signifies the end of the conversation.* Other tools: Refer to the tool's description.# Current Date:$DATE$

Usage Notes

  • This skill is based on the teamo_lite_offline agent configuration
  • Template variables (if any) like $DATE$, $SESSION_GROUP_ID$ may require runtime substitution
  • Follow the instructions and guidelines provided in the content above

Comments

Loading comments...