Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
Skill description advertises product details, latest releases, prices, and nearby store services, but the SKILL.md contains only a static 'knowledge card' template and provides no instructions, APIs, or data sources to fetch dynamic information — capability claims are not supported by the instructions.
Instruction Scope
SKILL.md is minimal and safe: it only defines when to read the card and what fields to show. It does not instruct the agent to access files, environment variables, external APIs, or send data to third parties. However, it also does not specify how to obtain the dynamic information advertised.
Install Mechanism
No install spec and no code files — lowest-risk instruction-only skill. Nothing is written to disk or installed.
Credentials
The skill requests no environment variables, credentials, or config paths — there is no excessive or unexplained access requested.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request elevated or persistent presence and does not modify other skills or system settings.
What to consider before installing
This skill appears to be a static template for an "Xbox" knowledge card rather than a tool that fetches live prices, newest releases, or nearby store availability. If you need real-time product, pricing, or location data, confirm how the skill will obtain that data (which APIs or data sources it will call) before installing. If the publisher intends live lookups, the SKILL.md should be updated to show the data sources and any required credentials; otherwise expect only static, general-purpose summaries. Installing poses low technical risk (no installs or secrets), but it may not deliver the dynamic functionality its description promises.Like a lobster shell, security has layers — review code before you run it.
latestvk971wdyxcx6ge43kass392pzf184xmwa
License
MIT-0
Free to use, modify, and redistribute. No attribution required.