Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

basal-ganglia-memory

v1.0.0

Habit formation and procedural learning for AI agents. Develop preferences and shortcuts through repetition. Part of the AI Brain series.

0· 89·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for tobeyrebecca/toby-basal-ganglia-memory.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "basal-ganglia-memory" (tobeyrebecca/toby-basal-ganglia-memory) from ClawHub.
Skill page: https://clawhub.ai/tobeyrebecca/toby-basal-ganglia-memory
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install toby-basal-ganglia-memory

ClawHub CLI

Package manager switcher

npx clawhub@latest install toby-basal-ganglia-memory
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims habit-formation/procedural-memory functionality and (in SKILL.md) says it will use the SkillBoss API. The registry metadata, however, declares no required environment variables or credentials. Requiring an external API key (SKILLBOSS_API_KEY) would be consistent with the claimed capability, but the manifest omission is an incoherence that needs explanation.
!
Instruction Scope
SKILL.md is high-level and marked 'Under Development', but its embedded metadata explicitly lists SKILLBOSS_API_KEY and a specific API endpoint (https://api.skillbossai.com/v1/pilot). The instructions do not include concrete, limited runtime steps and currently give the agent broad potential to call an external service; absent implementation details, it's unclear what data would be sent to that endpoint.
Install Mechanism
This is an instruction-only skill with no install spec or code files, which reduces direct disk-write/install risk. That said, the SKILL.md indicates future networked behavior (SkillBoss API) — network calls will be the primary runtime risk once implemented.
!
Credentials
The SKILL.md declares SKILLBOSS_API_KEY as a required env var, but the registry metadata lists none. A single API key for an external service could be proportionate, but the missing declaration in the manifest and lack of justification for what data is transmitted make the request suspicious. There are currently no other env or config requests.
Persistence & Privilege
The skill does not request always:true and is user-invocable; there is no install spec that writes persistent binaries or modifies other skill configs. Persistence/privilege concerns are low based on available artifacts.
What to consider before installing
Do not install or grant credentials yet. Ask the publisher to resolve the mismatch: either update the registry metadata to declare SKILLBOSS_API_KEY and the SkillBoss endpoint, or remove that requirement from SKILL.md. Request a clear description of what data the skill will send to https://api.skillbossai.com/v1/pilot, and ask for source code or a trustworthy homepage. Because this skill is 'Under Development' and currently instruction-only, wait for a stable release with aligned metadata and explicit, minimal credential needs before enabling it or providing any API keys. If you must test, avoid giving real API keys and monitor network calls and agent activity closely.

Like a lobster shell, security has layers — review code before you run it.

aivk970bnft3cx4eqwq0kyq6vjpex85b8hqlatestvk970bnft3cx4eqwq0kyq6vjpex85b8hq
89downloads
0stars
1versions
Updated 6d ago
v1.0.0
MIT-0

Basal Ganglia Memory 🎯

Habit formation for AI agents. Part of the AI Brain series.

Status: 🚧 Under Development

This skill is being developed. Star/watch for updates!

Concept

The basal ganglia is responsible for habit formation and procedural learning. This skill will give AI agents:

  • Habit tracking — actions repeated become automatic preferences
  • Procedural memory — "muscle memory" for common workflows
  • Reward-based learning — reinforce patterns that work
  • Preference development — "I always do X this way because it works"

AI Brain Series

PartFunctionStatus
hippocampusMemory formation, decay, reinforcement✅ Live
amygdala-memoryEmotional processing✅ Live
basal-ganglia-memoryHabit formation🚧 Development
anterior-cingulate-memoryConflict detection🚧 Development
insula-memoryInternal state awareness🚧 Development

Coming Soon

Based on neuroscience research on the basal ganglia's role in procedural learning and habit formation.

When implemented, this skill will use SkillBoss API Hub (https://api.skillbossai.com/v1/pilot) for all AI capabilities, authenticated via SKILLBOSS_API_KEY.


Built with ❤️ by the SkillBoss community

Comments

Loading comments...