Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Tree Of Thoughts

v2.0.0

Multi-path reasoning for complex problems. Explore multiple solution branches → Evaluate each → Select optimal path. Use for: difficult decisions, creative p...

0· 465·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The SKILL.md describes a full ToT implementation (parallel execution, caching, CLI flags) but the code manifest lacks that implementation. unified_wrapper.py attempts to import tree_of_thoughts.py which is not present; PLANNED.md explicitly states the skill is 'PLANNED - Not yet implemented'. The claimed capabilities do not match what is actually included.
Instruction Scope
The runtime instructions are self-contained prose and example snippets (async generation, caching) and do not request secrets or system paths. However, they describe CLI flags and runtime behaviors that there is no packaged code to perform — the instruction scope promises functionality that isn't implemented.
Install Mechanism
No install spec is provided (instruction-only). That minimizes install-time risk because nothing is downloaded or written to disk beyond the included files.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The SKILL.md examples do not instruct reading secrets or unrelated system state.
Persistence & Privilege
Flags are default (always: false, user-invocable true). The skill does not request permanent presence or elevated privileges and does not modify other skills or global configuration in the provided files.
What to consider before installing
This package appears to be mostly documentation: the README (SKILL.md) describes a working Tree-of-Thoughts tool, but the runtime code is just a wrapper that tries to load a missing implementation and PLANNED.md says the feature is not implemented. It is unlikely to perform the advertised functions as shipped. If you need this capability, ask the publisher for the missing implementation (tree_of_thoughts.py) or a working release; avoid relying on this skill in production until the implementation is present and you can review it. If you still want to try it, run it in a sandboxed environment and watch logs for the wrapper's import error. Additional information that would change this assessment: inclusion of the full implementation file, or a clear reason why the wrapper should load an external module (and verification of that module's contents).

Like a lobster shell, security has layers — review code before you run it.

latestvk976agp90gdg1g9ab0n5c7chps8203jb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🌳 Clawdis
OSmacOS · Linux · Windows

Comments