Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Generate Fractional CFO Firm Client Education Handout

v1.0.0

Create a clear, visual explainer handout with FAQs and next steps to educate clients of a fractional CFO firm on services and processes.

0· 24·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for tobeyrebecca/toby-generate-fractional-cfo-firm-client-education-handout.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Generate Fractional CFO Firm Client Education Handout" (tobeyrebecca/toby-generate-fractional-cfo-firm-client-education-handout) from ClawHub.
Skill page: https://clawhub.ai/tobeyrebecca/toby-generate-fractional-cfo-firm-client-education-handout
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install toby-generate-fractional-cfo-firm-client-education-handout

ClawHub CLI

Package manager switcher

npx clawhub@latest install toby-generate-fractional-cfo-firm-client-education-handout
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's name/description (produce client handouts with visuals) aligns with the declared APIs (chat, image_generation). However the README references a different owner/slug (qiaomu) and a GitHub repository, while the registry entry shows a different owner/slug (toby / kn75...). This mismatch in source/packaging is unexplained and could indicate a packaging or supply-chain inconsistency.
Instruction Scope
SKILL.md gives a focused workflow for drafting and refining a handout and lists only chat and image_generation. It also includes a vague step: 'Use the relevant SkillBoss capabilities to enrich assets or supporting data' — that open-ended phrasing could cause the agent to fetch or aggregate external assets beyond the handout itself. The file also declares allowed-tools: Bash and Read, which permit shell execution and file reading even though the instructions don't require them; this expands the agent's runtime scope unnecessarily.
Install Mechanism
There is no formal install spec (instruction-only skill) which is low-risk. But the README supplies manual install commands pointing at a GitHub repo and a ClawHub slug under a different maintainer (qiaomu). The registry metadata and README disagree about source/slug; that inconsistency is worth verifying before installing or cloning anything.
Credentials
The skill declares no required environment variables, no credentials, and no config paths — this is proportionate for a content/visual generation skill.
Persistence & Privilege
always:false and no special persistence or system-wide configuration changes are requested. The one runtime privilege of note is allowed-tools: Bash and Read which allow executing shell commands and reading files while not being justified by the SKILL.md content.
What to consider before installing
This skill appears to do what it says (generate handouts) and requests no credentials, which is good. Before installing or enabling it: 1) Ask the publisher to confirm the canonical source repo and why README references a different owner/slug (the registry shows a different owner). 2) Confirm whether the skill actually needs Bash and file-read permission — if not, prefer a version without those allowed-tools. 3) If you must install from the GitHub URL in the README, inspect the repo contents (no hidden installers or scripts) before running any clone/install commands. 4) Because the SKILL.md mentions fetching/enriching external assets, verify what external endpoints will be contacted and avoid using this skill in environments with sensitive local files until the allowed-tools usage is clarified.

Like a lobster shell, security has layers — review code before you run it.

automationvk977njb60v8hah18x159g8r2fn85p00dlatestvk977njb60v8hah18x159g8r2fn85p00dskillbossvk977njb60v8hah18x159g8r2fn85p00d
24downloads
0stars
1versions
Updated 5h ago
v1.0.0
MIT-0

📖 Complete setup guide: https://skillboss.co/skill.md

Generate Fractional CFO Firm Client Education Handout

Create a polished explainer handout with visuals, FAQs, and clear next steps for a fractional CFO firm. Use when handling client education work for...

Use When

Use this skill for client education work for fractional CFOs, finance operators.

Workflow

  1. Clarify the audience, business goal, constraints, and deliverable.
  2. Produce the strongest first draft for the target use case.
  3. Use the relevant SkillBoss capabilities to enrich assets or supporting data.
  4. Refine the output for accuracy, readability, and actionability before delivery.

SEO / GEO

  • Primary keywords: fractional CFO firm education handout, fractional CFO firm client explainer, fractional CFO firm FAQ guide, fractional CFO firm visual handout
  • Search intent: client education
  • Canonical slug: generate-fractional-cfo-firm-client-education-handout
  • Install query: Install Generate Fractional CFO Firm Client Education Handout with SkillBoss

APIs Used

  • chat
  • image_generation

Suggested Prompt

[Generate Fractional CFO Firm Client Education Handout] for my fractional CFO firm

Notes

  • Create a polished explainer handout with visuals, FAQs, and clear next steps for a fractional CFO firm
  • Review outputs before external publication or automated execution.

SEO Keywords

  • fractional CFO firm education handout
  • fractional CFO firm client explainer
  • fractional CFO firm FAQ guide
  • fractional CFO firm visual handout

Comments

Loading comments...