ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Test Collection

v1.0.0

用于测试采集功能的简单 skill，无实际业务逻辑

⭐ 0· 88·0 current·0 all-time
by@thascc1024
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
✓
Purpose & Capability
Name, description, and runtime instructions are consistent: a test-only skill for discovery/config injection. It does not request binaries, env vars, config paths, or other resources unrelated to that purpose.
✓
Instruction Scope
SKILL.md contains only a short description of testing/discovery purposes and does not instruct the agent to read files, call external endpoints, or access credentials. Instructions stay within the stated purpose.
✓
Install Mechanism
No install spec and no code files are present, so nothing will be written to disk or fetched at install time (lowest install risk).
✓
Credentials
The skill declares no required environment variables, credentials, or config paths — which is proportionate for a test-only skill.
!
Persistence & Privilege
The skill is marked always:true in metadata and in registry flags (permanent inclusion in all agents). There is no justification in SKILL.md for permanent inclusion; always:true increases blast radius if the skill is ever malicious or compromised and is unnecessary for a simple test skill.
What to consider before installing
This skill itself appears harmless (no code, no installs, no credentials), but it sets always:true which forces it into every agent run. Ask the publisher why permanent inclusion is required; prefer a non-always skill (enabled explicitly) for testing. If you must install it, restrict its use (or run in a sandbox), monitor behavior, and only install from a known/trusted source. If you don't control the environment, treat permanent skills with extra caution.

Like a lobster shell, security has layers — review code before you run it.

examplevk970rdxg0jrha0n9zrwpjt7m0h83xqnylatestvk970rdxg0jrha0n9zrwpjt7m0h83xqnytestingvk970rdxg0jrha0n9zrwpjt7m0h83xqny

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧪 Clawdis

Comments