ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Godot Engine 3d Developer

v0.1.0

Skills and agent workflows for 3D game development with Godot Engine.

⭐ 0· 506·1 current·1 all-time
byTippy Entertainment@tippyentertainment
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description align with the SKILL.md content: task management, builds, asset conversions and Godot-specific guidance. There are no unrelated required binaries, environment variables, or config paths in the metadata that would be out of scope for a game-development workflow skill. The SKILL.md explicitly targets a Tasking.tech-style backend, which is consistent with the declared behavior.
ℹ
Instruction Scope
The instructions tell the agent to create tasks, enqueue builds, reference repo paths and storage IDs, and otherwise interact with an internal Tasking.tech API/workflow. The document explicitly states the agent should not read local files directly and should pass file paths/ids instead. This is internally consistent, but it assumes the agent runtime provides a Tasking.tech-compatible backend or connector — otherwise the skill will be non-functional.
✓
Install Mechanism
There is no install spec and no code files; this is instruction-only, so nothing is downloaded or written to disk by the skill itself. That represents the lowest install risk.
ℹ
Credentials
The skill declares no required environment variables or credentials. However, it expects to call an internal Tasking.tech API (frontmatter target points to https://tasking.tech). Because no credentials are declared, the skill assumes the host platform will provide any necessary authentication/authorization; verify that behavior and what tokens the platform supplies before trusting it with project IDs or build jobs.
✓
Persistence & Privilege
The skill does not request always:true and is user-invocable. It does not attempt to modify other skills or system-wide settings in the provided instructions. Autonomous invocation is allowed (platform default) but unchanged here.
Assessment
This skill is instruction-only and coherent for 3D Godot workflows: it expects a Tasking.tech-compatible backend to enqueue tasks and builds and does not install or require credentials itself. Before installing, confirm (1) whether your agent/runtime actually integrates with Tasking.tech (the skill may be non-functional otherwise), (2) what platform-provided credentials or tokens will be used when the skill enqueues jobs or modifies project data, and (3) that you trust the owner/source (no homepage provided). If you don't use Tasking.tech or you don't want the platform to act on your project IDs or build jobs, do not enable this skill. If you do enable it, limit its scope to non-sensitive projects and review/approve actions the first few times it runs.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e4nkkekr2as9dx161t0ffdx81qjc3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments