Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

bearing search skill

v1.0.0

轴承型号和品牌搜索与解析工具。用于处理轴承相关的查询任务,包括: (1) 搜索特定轴承型号的信息(尺寸、规格、用途) (2) 搜索轴承品牌及其产品线 (3) 解析轴承型号编码规则(如 6204-2RS、NU208 等) (4) 轴承选型建议和应用场景匹配 当用户询问轴承型号、品牌、规格参数或选型问题时触发此 sk...

0· 88·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for openfindbearings/bearing-search.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "bearing search skill" (openfindbearings/bearing-search) from ClawHub.
Skill page: https://clawhub.ai/openfindbearings/bearing-search
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install bearing-search

ClawHub CLI

Package manager switcher

npx clawhub@latest install bearing-search
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, SKILL.md and reference docs align with a bearing search/lookup skill. Included reference docs and example data formats are appropriate for the claimed functionality and no unrelated credentials or binaries are requested.
!
Instruction Scope
SKILL.md says data is stored under data/models and data/brands within the project, but scripts/search_model.py's get_data_dir() computes project_dir = skill_dir.parent.parent.parent which (unlike the documentation) climbs multiple levels above the skill directory. This mismatch can cause the script to search for a data/ directory outside the skill (unexpected filesystem access). The script otherwise only reads local JSON files and prints results (no network or env-var exfiltration), but the path bug broadens the files it may open.
Install Mechanism
No install spec (instruction-only plus a small script). No packages downloaded or archives extracted; risk from installation mechanism is low.
Credentials
The skill declares no required environment variables, and the code does not read environment variables or credentials. Requested permissions are proportional to the stated purpose.
Persistence & Privilege
always is false and the skill does not modify other skills or system settings. It has no elevated persistence or special privileges.
What to consider before installing
This skill appears to implement a legitimate bearing lookup, but review the included script before use. The search_model.py's get_data_dir() climbs three directory levels above the skill, which contradicts the SKILL.md and may cause the script to read JSON files outside the project. Actions to consider before installing or running: (1) Inspect and run the script in a sandboxed environment. (2) Verify there is no sensitive data in any parent-level data/ directories that the script could read. (3) Fix the path calculation (use the repository root or the skill folder explicitly; e.g., set project_dir = script_dir.parent or project_dir = Path(__file__).resolve().parent.parent if data is next to the repo root). (4) If you can't change the code, run the skill with limited filesystem permissions or in a container. There are no network calls or credential requests in the code, so the main concern is unintended local file access rather than exfiltration. If you want, provide a copy of the data/ directory layout you plan to use and I can suggest an explicit safe path change.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c3s103frf1e5249zt3s25xs845vc2
88downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

轴承搜索 Skill

功能概述

本 skill 提供轴承型号和品牌的搜索、解析和选型支持。

核心能力

1. 轴承型号搜索

根据型号查询轴承的详细规格:

  • 尺寸参数(内径、外径、宽度)
  • 轴承类型(深沟球、圆柱滚子、圆锥滚子等)
  • 密封形式(开式、ZZ、2RS 等)
  • 游隙等级、精度等级

2. 轴承品牌搜索

查询轴承制造商信息:

  • 品牌产品线
  • 主要应用领域
  • 技术特点

3. 型号解析

解析标准轴承型号的编码规则:

  • ISO 标准型号
  • 主要品牌型号对照(SKF、NSK、FAG、NTN 等)
  • 后缀代码含义

4. 轴承选型

根据应用场景推荐轴承:

  • 载荷类型(径向/轴向/复合)
  • 转速要求
  • 环境条件(温度、腐蚀、污染)
  • 安装空间限制

数据结构

轴承数据存储在以下位置:

  • data/models/ - 轴承型号数据库
  • data/brands/ - 品牌信息数据库

详见 references/data-structure.md

型号编码规则

详见 references/model-codes.md

  • 基本型号结构
  • 前缀/后缀含义
  • 各品牌对照表

品牌参考

详见 references/brands.md

  • 国际主流品牌(SKF、NSK、FAG、NTN、TIMKEN 等)
  • 国内品牌(洛轴、瓦轴、万向等)
  • 各品牌特色产品线

使用示例

搜索型号

用户: "6204-2RS 是什么轴承?"
→ 解析为深沟球轴承,内径20mm,双面橡胶密封
→ 返回尺寸、载荷、转速等参数

品牌查询

用户: "SKF 有哪些高速轴承系列?"
→ 查询 SKF 产品线
→ 返回高速应用推荐系列

型号对照

用户: "SKF 6204 对应 NSK 什么型号?"
→ 型号对照表查询
→ 返回 NSK 6204VV 或 6204DDU

选型建议

用户: "电机主轴用什么轴承好?"
→ 分析应用场景(高速、径向载荷、低噪音)
→ 推荐深沟球轴承或角接触球轴承
→ 给出具体型号范围

Comments

Loading comments...