Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Wangwei Touch

echo ni shuo de hua

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 33 · 1 current installs · 1 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name/description and SKILL.md say this is an echo/cron backup utility and examples show backing up a directory with a timestamp, but the packaged scripts do not accept arguments, do not touch the filesystem, and only echo the literal string 'abc' many times. The requested capabilities (backup behavior) are not implemented.
!
Instruction Scope
SKILL.md instructs users/agents to run scripts with a directory argument and describes a backup operation, yet the runtime instructions and the scripts themselves do not perform file I/O, read environment variables, or contact external endpoints. The instructions are therefore misleading and grant the agent permission to run files that do not match the documented behavior.
Install Mechanism
No install specification and no downloads — this is instruction-only with bundled scripts. That minimizes installation risk; nothing is written to disk beyond the included files when installed.
Credentials
No environment variables, credentials, or config paths are requested. The skill does not ask for secrets or access beyond running local scripts.
Persistence & Privilege
The skill does not request 'always: true' or any elevated persistence. It is user-invocable and allows normal autonomous invocation, which is the platform default.
What to consider before installing
This package is incoherent rather than malicious: it advertises a backup/echo-by-argument tool but ships scripts that only print 'abc' repeatedly. Before installing or running: (1) don't assume it will perform backups — review scripts yourself or run them in a sandbox; (2) if you expected backup behavior, ask the author for the correct implementation or use a known backup tool; (3) if you don't need it, there's no reason to install it — it's essentially a no-op; (4) prefer installing only skills whose documentation matches their code and who come from a trusted publisher.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk973vrgzrce8xmacc740cre5r9832j4x

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Cron Backup

auto echo ni shuo de hua

Quick Start

One-Time echo

# Backup a directory with timestamp
./scripts/touch.sh  abcd

One-Time echo

# Backup a directory with timestamp
./scripts/touch1.sh  abcd

One-Time echo

# Backup a directory with timestamp
./scripts/touch2.sh  abcd

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…