ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Partycraft

v2.0.1

Plan events with budgets, guest lists, and timelines. Use when organizing weddings, coordinating birthdays, managing vendors, drafting invitations.

⭐ 0· 297·0 current·0 all-time
by@bytesagain1
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (event planning) match the delivered functionality: a CLI that creates events, budgets, tasks, guests, timelines, and checklist templates. The only required runtimes (bash, python3) are appropriate and documented.
✓
Instruction Scope
SKILL.md and the included script limit actions to local operations (printing to stdout and reading/writing ~/.partycraft/events.json). There are no instructions to read unrelated system files, access network endpoints, or exfiltrate data. The documentation and script are consistent.
✓
Install Mechanism
No install spec or remote downloads are used; the skill is instruction-only with a bundled script. That minimizes installation risk.
✓
Credentials
The skill requests no environment variables or credentials. It writes only to a single directory in the user's home (~/.partycraft), which is proportionate to storing user event data. Users should note their event data is stored unencrypted on disk.
✓
Persistence & Privilege
The skill is not always-enabled and does not attempt to modify other skills or agent-wide configuration. Autonomous invocation is allowed by platform default but the skill itself does not request elevated persistence or system-wide changes.
Assessment
This skill appears coherent and only stores data locally in ~/.partycraft/events.json. Before installing, confirm you are comfortable storing event details unencrypted in your home directory and that python3/bash are available. If you want stronger privacy, back up or encrypt the ~/.partycraft directory. If you see any unexpected network activity after running the skill, stop and investigate, but none is present in the source.

Like a lobster shell, security has layers — review code before you run it.

latestvk97abq42hrcn8sxp42hn46r9ah8344mp

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments