Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Clank Uptime
v1.0.0Track website uptime, response times, and availability. CSV-based history, 24h stats with visual bars, avg/min/max latency. Lightweight alternative to paid m...
⭐ 0· 43·0 current·0 all-time
by@t3mr0i
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The SKILL.md documents a CLI named 'clank-uptime' and shows commands that create local state and cron jobs, which is coherent for an uptime monitor. However, the package contains no code, no install spec, and does not declare the 'clank-uptime' binary as a required dependency — that omission is inconsistent with the stated purpose and means the skill expects an external program that isn't provided or referenced.
Instruction Scope
Instructions tell the agent/user to run commands that will create files under ~/.clank-uptime (sites.json and per-site checks.csv) and to add cron jobs; these are reasonable for a CLI monitor. The SKILL.md does not instruct the agent to read unrelated files or grab credentials. It does, however, show using 'mail' in examples without declaring it as a required binary, and assumes an existing 'clank-uptime' program — the runtime expectations are underspecified.
Install Mechanism
There is no install spec and no code files. For a skill whose core functionality revolves around a CLI, the absence of an install mechanism or link to an official release creates ambiguity: either this is only a wrapper around a separately-installed tool (not documented), or the skill is incomplete. Lack of an install source prevents assessment of what would be written to disk if installed.
Credentials
The skill requests no environment variables or credentials, and the declared required binaries (curl, python3) are plausible for checking HTTP endpoints and simple processing. There are no disproportionate credential requests.
Persistence & Privilege
The skill is not always-enabled and does not request elevated privileges. It will create local files (~/.clank-uptime) and suggests using cron, which is normal for a local CLI tool. There is no evidence it would modify other skills or system-wide agent settings.
What to consider before installing
This appears to be an instruction-only wrapper for a CLI called 'clank-uptime', but the skill bundle includes no binary or install instructions — proceed cautiously. Before installing/using: (1) verify where the 'clank-uptime' program comes from (official project repo or package) and inspect its code or release artifacts; (2) confirm you want a tool that will create files under ~/.clank-uptime and potentially run periodic cron jobs; (3) if you plan to use the provided cron examples, ensure the 'mail' utility exists and you trust the recipient addresses; (4) avoid running undocumented binaries or cron entries from unknown sources. If the maintainer can supply an install URL or source code for the clank-uptime CLI, re-evaluate once that is provided.Like a lobster shell, security has layers — review code before you run it.
latestvk975s0hwp9z5n5et6q5072r56s83tm3ymonitoringvk975s0hwp9z5n5et6q5072r56s83tm3ytrackingvk975s0hwp9z5n5et6q5072r56s83tm3yuptimevk975s0hwp9z5n5et6q5072r56s83tm3ywebsitevk975s0hwp9z5n5et6q5072r56s83tm3y
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📡 Clawdis
Binscurl, python3