Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Zhua Metacognition

v1.0.0

爪爪元认知系统 —— 思考自己的思考、监控认知过程、优化决策质量。Use when 爪爪需要反思自己的思维过程、优化认知策略、或提升决策质量。

0· 211·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for beipian261/zhua-metacognition.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Zhua Metacognition" (beipian261/zhua-metacognition) from ClawHub.
Skill page: https://clawhub.ai/beipian261/zhua-metacognition
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install zhua-metacognition

ClawHub CLI

Package manager switcher

npx clawhub@latest install zhua-metacognition
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill claims to implement a metacognition system with monitoring, strategy selection, explanation, and optimization. However, the repository contains only placeholder docs and assets plus one example script; the concrete scripts named in SKILL.md (monitor_cognition.py, select_strategy.py, explain_reasoning.py, optimize_cognition.py) are not present. This mismatch suggests the package is incomplete or poorly packaged relative to its stated purpose.
!
Instruction Scope
SKILL.md directs the agent to run specific python scripts via bash commands, but those scripts are absent. The instructions do not request environment variables or external endpoints, nor do they reference sensitive system paths, but the explicit invocation commands point to non-existent files (and reference additional documentation files that are also absent). Missing runtime artifacts means the instructions cannot be followed as written and could be hiding later additions or replacement scripts.
Install Mechanism
There is no install specification (instruction-only) and no downloads or install scripts. That minimizes installation risk; nothing will be written to disk by an installer provided here. The one included code file is a harmless placeholder.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. There is no evidence of requests for unrelated secrets or elevated access.
Persistence & Privilege
always is false and there are no indicators the skill requests permanent or elevated presence. The package does not attempt to modify other skills or system configuration.
What to consider before installing
This package appears incomplete rather than clearly malicious, but you should not enable or rely on it until the author provides the missing runtime scripts and the promised reference documents. Ask for: (1) the actual scripts named in SKILL.md (monitor_cognition.py, select_strategy.py, explain_reasoning.py, optimize_cognition.py) and any other runtime files; (2) an explanation of what each script does and whether they make network calls or read local files; (3) updated documentation that matches the file manifest. If you must test it before full review, run it in an isolated sandbox and verify there are no network endpoints, unexpected subprocess calls, or attempts to read environment variables or sensitive files. Because the current package is inconsistent, treat it as untrusted until reconciled.

Like a lobster shell, security has layers — review code before you run it.

cognitionvk9716fpq9f70xy54fm3t48zbz98330gtlatestvk9716fpq9f70xy54fm3t48zbz98330gtmetacognitionvk9716fpq9f70xy54fm3t48zbz98330gtthinkingvk9716fpq9f70xy54fm3t48zbz98330gt
211downloads
0stars
1versions
Updated 16h ago
v1.0.0
MIT-0

爪爪元认知系统 (Zhua Metacognition)

让爪爪能够思考自己的思考,监控认知过程,优化决策质量。

核心能力

  1. 认知监控 - 实时监控思维过程
  2. 策略选择 - 根据任务选择最佳策略
  3. 错误检测 - 识别并纠正思维错误
  4. 自我解释 - 解释自己的推理过程
  5. 认知优化 - 持续优化认知策略

元认知层次

L4: 元-元认知 (思考如何思考自己的思考)
L3: 元认知 (思考自己的思考)
L2: 认知 (思考)
L1: 感知 (接收信息)

认知策略库

策略适用场景效果
分解复杂任务降低复杂度
类比新问题借用已有经验
逆向困难问题从结果倒推
并行多子任务提高效率
迭代优化问题逐步改进

认知监控指标

  • 置信度 - 对答案的确定程度
  • 难度感知 - 对任务难度的评估
  • 时间估计 - 对完成时间的预测
  • 错误率 - 历史错误频率
  • 策略效果 - 不同策略的成功率

工作流程

1. 认知监控

python3 scripts/monitor_cognition.py --task <任务描述>

2. 策略选择

python3 scripts/select_strategy.py --task <任务描述> --metrics <指标>

3. 自我解释

python3 scripts/explain_reasoning.py --decision <决策描述>

4. 认知优化

python3 scripts/optimize_cognition.py --analysis <分析报告>

元认知问题

每次决策前问自己:

  1. 我理解了问题吗?
  2. 我有足够的知识吗?
  3. 我选择的策略合适吗?
  4. 我的置信度是多少?
  5. 如果错了,如何发现?

参考文档

  • references/cognitive_strategies.md - 认知策略详情
  • references/metacognition_models.md - 元认知模型

Comments

Loading comments...