Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Philosophy Dialogue
v4.3.0思想碰撞的火花,在这里点燃!243 位思想巨人跨越时空对话,6 种对话模式(含雄辩天下杯赛制)。 243 intellectual giants dialogue across time. 6 modes including cup tournament. 触发词:哲学对话、哲学辩论、双人论战、雄辩天下、phil...
⭐ 1· 228·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included files: modes, scoring, a 243‑person registry and optional tournament helper. No unexpected env vars or binaries are requested. Declared read/write paths (read perspectives, write tournament data to memory/) are consistent with a dialogue/tournament skill.
Instruction Scope
SKILL.md instructs the agent to read the built-in references/perspective files and (optionally) external skills/*-perspective/SKILL.md for compatibility, and to write tournament records to memory/philosophy-dialogues/tournaments/. Those read/write actions align with the skill purpose, but the cross-skill read permission is broader than strictly necessary and could expose other workspace skill metadata if present. The SKILL.md otherwise does not instruct network exfiltration, credential access, or reading unrelated system files.
Install Mechanism
This is instruction-only (no install spec). The README shows an optional GitHub clone to get the 'complete' perspectives; cloning is a normal distribution method but the user should audit repo contents before running any scripts. No package downloads or extract-from-URL installers are declared.
Credentials
The skill requests no environment variables or external credentials. The package.json declares permissions to read the skill's own references and an ability to read skills/*-perspective/SKILL.md and to write memory/... — these are file permissions rather than credential requests and are explainable by the skill's design.
Persistence & Privilege
always:false and normal model invocation are used. The skill requests read access to other skills' perspective SKILL.md files (skills/*-perspective/SKILL.md) which grants broader workspace visibility than reading only its own bundled perspectives; combined with write access to memory/, this gives persistent ability to read/write within the user's workspace. That is explainable by the 'compatibility with external perspective skills' claim but is a privilege the user should be aware of.
Assessment
This skill appears to do what it says: run simulated philosophical dialogues and optionally run cup‑style tournaments. Things to consider before installing/using:
- No credentials or special environment variables are requested — good.
- The full feature set (243 perspectives and the optional tournament script) is only present in the GitHub 'complete' clone. If you git clone that repo, inspect its files before running anything.
- package.json declares permission to read skills/*-perspective/SKILL.md. That lets the skill read perspective files from other skills in your workspace — useful for compatibility but broader than strictly necessary. If you have other sensitive files in workspace, review them or restrict placement.
- The tournament helper is an optional Python script; the SKILL.md claims it uses only the standard library and reads/writes only the registry and memory/ files, but the script's contents were not included in the static content scanned here — open and review scripts/tournament-allocator.py before executing.
- If you want to avoid pulling any external code, use the ClawHub lightweight installation option (described in SKILL.md), which omits the perspective directory; the skill will instead rely on the agent's knowledge to emulate perspectives.
If you want, I can: (1) list the exact file paths this skill will read/write, (2) help inspect the tournament script if you provide its content, or (3) suggest a minimal safe workflow for trying the skill (e.g., run read-only interactions first, keep perspectives out of shared/workspace directories).Like a lobster shell, security has layers — review code before you run it.
latestvk971v2dn9285n9tg0t8shzye7x84whfg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
