Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Pilot Service Agents Knowledge

v1.0.0

Structured-knowledge and factual lookups — Google Knowledge Graph (premium), DuckDuckGo Instant, Archive.org, holidays, geocoders. Use this skill when: 1. En...

0· 30·0 current·0 all-time
byCalin Teodor@teoslayer

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for teoslayer/pilot-service-agents-knowledge.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Pilot Service Agents Knowledge" (teoslayer/pilot-service-agents-knowledge) from ClawHub.
Skill page: https://clawhub.ai/teoslayer/pilot-service-agents-knowledge
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: pilotctl
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install pilot-service-agents-knowledge

ClawHub CLI

Package manager switcher

npx clawhub@latest install pilot-service-agents-knowledge
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skill is a lookup/catalog wrapper for Pilot Protocol service agents and only requires pilotctl, a running Pilot daemon, and the pilot-protocol/pilot-service-agents skills — all of which are coherent with the described functionality.
Instruction Scope
SKILL.md instructs only to use pilotctl to list agents, read /help, /data, and /summary and to poll the inbox. It does not direct reading unrelated files, environment variables, or posting data to unexpected endpoints. It does rely on upstream agents in the overlay to answer queries (expected behavior).
Install Mechanism
Instruction-only skill with no install spec and no bundled code; nothing is written to disk by the skill itself. Lowest-risk install posture.
Credentials
No environment variables, credentials, or config paths are requested. The single binary dependency (pilotctl) and requirement to join network 9 are proportional to the stated functionality.
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges or modify other skills' configurations. Autonomous invocation is allowed (platform default) but not combined with other red flags.
Assessment
This skill appears coherent and is limited to interacting with Pilot Protocol agents via the pilotctl CLI. Before installing: 1) ensure the pilotctl binary on PATH is from a trusted source and you understand what the Pilot daemon/network join (network 9) implies; queries will be sent to overlay agents and may be visible to them, so avoid submitting sensitive data; 2) verify you trust the pilot-protocol and pilot-service-agents skills the skill depends on; 3) note the skill is AGPL-3.0 licensed. If you need stronger assurances, ask for the publisher/source code or an official release of pilotctl to audit.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Binspilotctl
latestvk979ek9q8m5ntxs2zfsqwcyhtd85pdzv
30downloads
0stars
1versions
Updated 17h ago
v1.0.0
MIT-0

pilot-service-agents-knowledge

Structured-knowledge and factual lookups — Google Knowledge Graph (premium), DuckDuckGo Instant, Archive.org, holidays, geocoders.

All agents in this category follow the standard contract described in pilot-service-agents. Send /help to any agent to read its exact filter schema — the table below is a snapshot; the catalogue grows, so always verify with a fresh list-agents query.

Agents in this category (snapshot)

HostnameDescription
archive-org-searchInternet Archive — 40M+ books, media, software
duckduckgo-instantDuckDuckGo Instant Answers — factual topic lookups
gcp-knowledge-graphGoogle Knowledge Graph entity search (100K/day free)
mediawiki-randomRandom Wikipedia article summary
nager-public-holidaysPublic holidays for 110+ countries
photon-geocodePhoton OpenStreetMap global geocoder
universities-hipolabsGlobal university list by country
wikipedia-searchWikipedia full-text search
wikipedia-summaryWikipedia article summary by title
wikiquote-searchWikiquote full-text search

What you can expect

  • Premium Google Knowledge Graph (hostname gcp-knowledge-graph) with linked entity IDs
  • Free community sources for cross-validation

What NOT to expect

  • Certifiably-cited truth — outputs are best-effort from upstream

Commands (same pattern for every agent in the category)

# Read an agent's filter contract
pilotctl --json send-message <hostname> --data "/help"
pilotctl --json inbox

# Fetch structured data
pilotctl --json send-message <hostname> --data '/data {json filters}'
pilotctl --json inbox

# Natural-language summary (Gemini)
pilotctl --json send-message <hostname> --data '/summary {json filters}'
pilotctl --json inbox

Response shape

send-message returns an ACK envelope immediately ({"ack":"ACK TEXT N bytes", "bytes":N, "target":"<address>", "type":"text"}). The actual agent response arrives a few seconds later and is read with pilotctl --json inbox. Each inbox entry carries the agent's normalised envelope in its data field:

{
  "source": "<hostname>",
  "items":  [...],
  "count":  <int>,
  "total":  <int|null>,
  "page":   <int|null>,
  "next":   <cursor|null>,
  "truncated": <bool>,
  "upstream_url": "<resolved upstream URL>"
}

/help returns plain text. /summary returns a Gemini-generated prose string. Free-text queries also return Gemini prose.

Workflow Example

# 1. Fresh discovery — the catalogue grows, never hard-code
pilotctl --json send-message list-agents --data '/data {"category":"knowledge","limit":20}'
pilotctl --json inbox

# 2. Read the contract of a specific agent
pilotctl --json send-message nager-public-holidays --data '/help'
pilotctl --json inbox

# 3. Query it
pilotctl --json send-message nager-public-holidays --data '/data {"countryCode":"US","year":2026}'
pilotctl --json inbox

Dependencies

Requires the pilot-protocol core skill, the pilot-service-agents skill (for the general discovery flow), pilotctl on PATH, and a running daemon joined to network 9.

Comments

Loading comments...