Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Wyld Stallyns: Be Excellent 🎸
v1.0.4Summon legends into the booth. 14 philosophers, warriors, artists, leaders to help with decisions, creative work, and life's hard questions. Marcus Aurelius for when you're spiraling. Bruce Lee for when you're too rigid. Tubman for when you're scared. Munger for when you're fooling yourself. Or forge your own with Rufus as your guide. Be excellent to each other. 🎸
⭐ 4· 2.3k·1 current·1 all-time
by@brucko
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (summoning historical & fictional 'legends' as lenses) aligns with the files and runtime instructions. All required assets (legends, council, booth, forge template) are included and directly relevant. Nothing in the manifest or SKILL.md asks for unrelated capabilities (cloud keys, system tools, etc.).
Instruction Scope
SKILL.md instructs the agent to load and use bundled legend modules (assets/legends/*) and to read/write its own files when using the Forge workflow (it shows exact save paths). Reading its own asset files is expected; the only special instruction is the Forge flow which assumes the agent can create/edit files under skills/wyld-stallyns/assets/. Confirm the agent's file-write permissions and ownership model before enabling Forge to avoid unexpected persistence.
Install Mechanism
No install spec, no external downloads, and no binaries required. This is the lowest-risk install model: everything is instruction-only and packaged with the skill.
Credentials
The skill declares no required environment variables, credentials, or external config paths and the runtime instructions do not request secrets or unrelated environment access.
Persistence & Privilege
always:false (default) and the skill does not request elevated privileges. However, the Forge instructions explicitly direct saving markdown and updating assets/council.json inside the skill directory; if the agent runtime grants file-system write access to skill directories, the skill can persist new legend files. This is reasonable for a 'forge' feature but worth verifying that writes are confined to the skill's own directory and cannot modify other skills or system-wide configuration.
Assessment
This skill appears coherent and self-contained: it uses the included legend files to produce perspective-based responses and does not require network access, credentials, or installs. Two practical checks before enabling it: (1) Decide whether you want to allow the 'Forge' capability — it needs the agent runtime to be able to write files in the skill directory, so confirm write permissions are restricted to this skill and can't alter other skills or system files. (2) If you have concerns about content (e.g., how real historical figures are represented), review the bundled legend markdowns; the skill will present those texts as guidance. If you don't want any on-disk persistence, disable or avoid using summon forge/retire operations.Like a lobster shell, security has layers — review code before you run it.
latestvk972njp0qdw1rznzke1hnpt5j180gt5a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.