Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Test Collection

v1.0.0

用于测试采集功能的简单 skill,无实际业务逻辑

0· 118·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for thascc1024/test-collection.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Test Collection" (thascc1024/test-collection) from ClawHub.
Skill page: https://clawhub.ai/thascc1024/test-collection
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install test-collection

ClawHub CLI

Package manager switcher

npx clawhub@latest install test-collection
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, and runtime instructions are consistent: a test-only skill for discovery/config injection. It does not request binaries, env vars, config paths, or other resources unrelated to that purpose.
Instruction Scope
SKILL.md contains only a short description of testing/discovery purposes and does not instruct the agent to read files, call external endpoints, or access credentials. Instructions stay within the stated purpose.
Install Mechanism
No install spec and no code files are present, so nothing will be written to disk or fetched at install time (lowest install risk).
Credentials
The skill declares no required environment variables, credentials, or config paths — which is proportionate for a test-only skill.
!
Persistence & Privilege
The skill is marked always:true in metadata and in registry flags (permanent inclusion in all agents). There is no justification in SKILL.md for permanent inclusion; always:true increases blast radius if the skill is ever malicious or compromised and is unnecessary for a simple test skill.
What to consider before installing
This skill itself appears harmless (no code, no installs, no credentials), but it sets always:true which forces it into every agent run. Ask the publisher why permanent inclusion is required; prefer a non-always skill (enabled explicitly) for testing. If you must install it, restrict its use (or run in a sandbox), monitor behavior, and only install from a known/trusted source. If you don't control the environment, treat permanent skills with extra caution.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🧪 Clawdis
examplevk970rdxg0jrha0n9zrwpjt7m0h83xqnylatestvk970rdxg0jrha0n9zrwpjt7m0h83xqnytestingvk970rdxg0jrha0n9zrwpjt7m0h83xqny
118downloads
0stars
1versions
Updated 4w ago
v1.0.0
MIT-0

Test Collection Skill

这是一个用于测试 skill 采集功能的示例 skill。

用途

  • 验证 skill 发现机制
  • 测试 skill 优先级覆盖
  • 验证配置注入

使用方式

这个 skill 不需要任何特殊操作,只要能被 OpenClaw 发现并加载到系统提示词中即表示成功。

变更记录

  • v1.0.0: 初始版本,用于测试

Comments

Loading comments...