Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Graph Of Thoughts
v2.0.0Graph-based reasoning with thought combination and feedback loops. Explores multiple solution paths simultaneously, combines insights, and synthesizes optima...
⭐ 0· 480·3 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Graph of Thoughts reasoning) matches the included SKILL.md, examples, integration docs, and code. Examples and integration points align with a multi-path reasoning/synthesis tool; there are no environment variables, binaries, or credentials required that are unrelated to the stated purpose.
Instruction Scope
SKILL.md focuses on generating/evaluating/composing thought paths and contains examples, tests, and integration guidance that stay within the skill's scope. It references storing session learnings (memory.store / memory/got-sessions.md) and running test scripts (pwsh skills/.../run-tests.ps1). These are plausible for a reasoning skill but imply the skill or integrator may write session data to the agent's memory/storage — review storage policies if that is a concern.
Install Mechanism
No install spec is provided (instruction-only), so nothing will be downloaded or installed on the host. This is the lowest-risk model and matches the SKILL.md content.
Credentials
The skill does not request any environment variables, credentials, or config paths. SKILL.md and code do not instruct the agent to read unrelated secrets or external service tokens.
Persistence & Privilege
The skill is not marked 'always' and uses normal autonomous invocation defaults. It does reference writing session learnings (memory.store) in integration docs, which is a reasonable feature for a reasoning skill but should be allowed/monitored per your agent's memory policy.
Assessment
This skill is coherent with its stated purpose and does not request credentials or perform installs. Before installing or enabling it for autonomous use: 1) note that unified_wrapper.py tries to import 'graph_of_thoughts.py' from the package root but that file is not present in the provided manifest — the wrapper will fail to load the original implementation unless that file is supplied; 2) the SKILL.md and integration docs assume the skill can write session summaries (memory/got-sessions.md) and run test scripts — confirm whether writing to agent memory/storage and test-script execution are acceptable; 3) small code issues (unreachable return in can_handle, basic error handling) look like benign bugs but review the original implementation if you get it. If you require network or file-write restrictions, ensure the agent's runtime enforces those, and ask the skill author for the missing implementation file and a test-run log before giving it broader privileges.Like a lobster shell, security has layers — review code before you run it.
latestvk974nyq8zet342fqbryqw51ga18204ns
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🕸️ Clawdis
OSmacOS · Linux · Windows