Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Thesaurus

v2.0.1

Look up synonyms, antonyms, and related words with history and export. Use when finding alternatives, checking usage, running drills, analyzing frequency.

0· 209·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for bytesagain3/thesaurus.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Thesaurus" (bytesagain3/thesaurus) from ClawHub.
Skill page: https://clawhub.ai/bytesagain3/thesaurus
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install thesaurus

ClawHub CLI

Package manager switcher

npx clawhub@latest install thesaurus
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (thesaurus CLI that records and exports entries) align with the included shell script and SKILL.md. The script implements commands, local logging, stats, search, and export functionality consistent with the stated purpose.
Instruction Scope
SKILL.md and the script limit themselves to local file operations (creating ~/.local/share/thesaurus, writing/reading .log files, grep/tail/du/wc). There are no instructions to read unrelated system files or to transmit data externally. One minor note: SKILL.md invokes a 'thesaurus' command but provides no automated install; the repository includes scripts/script.sh which appears to be the CLI implementation and must be placed on PATH by the user.
Install Mechanism
There is no install spec (instruction-only), which is low-risk. However, a script file is included (scripts/script.sh). This is not an automatic downloader — it means a user must install or symlink the script to use the 'thesaurus' command. No remote downloads or extract operations are present in the packaged files.
Credentials
The skill requests no environment variables, no credentials, and uses only the HOME variable to place data under the user's home directory. That is proportionate for a local CLI data-tracking tool.
Persistence & Privilege
Skill is not marked always:true and does not request system-wide configuration changes. It stores data under the user's home directory only. Default autonomous invocation is allowed by platform policy but this skill's local-only behavior keeps blast radius low.
Assessment
This skill appears coherent and offline: it writes logs and exports to ~/.local/share/thesaurus and does not require credentials or network access. Before installing, review or run the provided scripts/script.sh locally (it must be installed or symlinked to 'thesaurus' to work). If you store sensitive text in the tool, remember exports are plain files under your home directory; back them up or delete them if needed. If you want extra assurance, open the full script to confirm there are no hidden network calls before making it executable or placing it on your PATH.

Like a lobster shell, security has layers — review code before you run it.

latestvk9706r407kr64tc9xft9gmx9md835ryh
209downloads
0stars
2versions
Updated 22h ago
v2.0.1
MIT-0

Thesaurus

Lightweight Thesaurus tracker. Add entries, view stats, search history, and export in multiple formats.

Why Thesaurus?

  • Works entirely offline — your data never leaves your machine
  • Simple command-line interface, no GUI needed
  • Export to JSON, CSV, or plain text anytime
  • Automatic history and activity logging

Getting Started

# See what you can do
thesaurus help

# Check current status
thesaurus status

# View your statistics
thesaurus stats

Commands

CommandWhat it does
thesaurus runRun
thesaurus checkCheck
thesaurus convertConvert
thesaurus analyzeAnalyze
thesaurus generateGenerate
thesaurus previewPreview
thesaurus batchBatch
thesaurus compareCompare
thesaurus exportExport
thesaurus configConfig
thesaurus statusStatus
thesaurus reportReport
thesaurus statsSummary statistics
thesaurus export<fmt> Export (json
thesaurus search<term> Search entries
thesaurus recentRecent activity
thesaurus statusHealth check
thesaurus helpShow this help
thesaurus versionShow version
thesaurus $name:$c entries
thesaurus Total:$total entries
thesaurus Datasize: $(du -sh "$DATA_DIR" 2>/dev/null
thesaurus Version:v2.0.0
thesaurus Datadir: $DATA_DIR
thesaurus Entries:$(cat "$DATA_DIR"/*.log 2>/dev/null
thesaurus Disk:$(du -sh "$DATA_DIR" 2>/dev/null
thesaurus Last:$(tail -1 "$DATA_DIR/history.log" 2>/dev/null
thesaurus Status:OK
thesaurus [Thesaurus]run: $input
thesaurus Saved.Total run entries: $total
thesaurus [Thesaurus]check: $input
thesaurus Saved.Total check entries: $total
thesaurus [Thesaurus]convert: $input
thesaurus Saved.Total convert entries: $total
thesaurus [Thesaurus]analyze: $input
thesaurus Saved.Total analyze entries: $total
thesaurus [Thesaurus]generate: $input
thesaurus Saved.Total generate entries: $total
thesaurus [Thesaurus]preview: $input
thesaurus Saved.Total preview entries: $total
thesaurus [Thesaurus]batch: $input
thesaurus Saved.Total batch entries: $total
thesaurus [Thesaurus]compare: $input
thesaurus Saved.Total compare entries: $total
thesaurus [Thesaurus]export: $input
thesaurus Saved.Total export entries: $total
thesaurus [Thesaurus]config: $input
thesaurus Saved.Total config entries: $total
thesaurus [Thesaurus]status: $input
thesaurus Saved.Total status entries: $total
thesaurus [Thesaurus]report: $input
thesaurus Saved.Total report entries: $total

Data Storage

All data is stored locally at ~/.local/share/thesaurus/. Each action is logged with timestamps. Use export to back up your data anytime.

Feedback

Found a bug or have a suggestion? Let us know: https://bytesagain.com/feedback/


Powered by BytesAgain | bytesagain.com | hello@bytesagain.com

Comments

Loading comments...