ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

ProofTrail MCP Skill

v0.1.1

Teach an agent to install ProofTrail's governed stdio MCP server, use the safest read and proof tools first, and keep future package or listing claims honest.

⭐ 0· 43·0 current·0 all-time
byYifeng[Terry] Yu@xiaojiou176
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name and description (install and use a repo-local ProofTrail stdio MCP server and prefer read/proof tools first) match the instructions and included reference files. The manifest, CAPABILITIES.md, and demo all align with that stated purpose. Nothing in the package asks for unrelated capabilities.
✓
Instruction Scope
SKILL.md and the reference docs focus on cloning the ProofTrail repo, running pnpm commands, attaching a repo-local stdio MCP server, and using safe-first tooling. The instructions do not ask the agent to read arbitrary host files, exfiltrate data, or contact unknown endpoints; they only note optional backend reads (UIQ_MCP_API_BASE_URL and 'any required token env vars') when live backend access is explicitly needed.
ℹ
Install Mechanism
This is an instruction-only skill (no install spec or code included). The recommended install is to git clone https://github.com/xiaojiou176-open/prooftrail.git and run pnpm install / pnpm mcp:start. That is coherent with the purpose, but cloning and running a third-party repo executes code from an external source—normal for this use case but a security consideration the user must evaluate separately.
✓
Credentials
The package declares no required env vars or credentials. The docs responsibly call out that if a real backend is needed the operator may set UIQ_MCP_API_BASE_URL and any backend token env vars; those are optional and consistent with the documented 'local-with-optional-backend-token' auth.
✓
Persistence & Privilege
always is false and there is no install-time code or hooks that would modify other skills or system-wide settings. The skill is an instruction packet only and does not request elevated persistence or privileges.
Assessment
This packet is internally consistent and appears to do what it claims: guide you to attach a repo-local ProofTrail stdio MCP server and prefer read/proof tools first. Before running anything: (1) inspect the GitHub repo (https://github.com/xiaojiou176-open/prooftrail.git) and review package.json scripts and pnpm install effects; (2) substitute the correct local cwd path in the provided config snippets; (3) only set UIQ_MCP_API_BASE_URL and any token env vars if you trust the backend and need live reads; (4) treat 'publish-ready' npm/Docker names as unpublished until you verify they exist. The skill contains no declared secrets or hidden endpoints, but cloning and running a third‑party repo can execute arbitrary code—review the repo before use.

Like a lobster shell, security has layers — review code before you run it.

browser-evidencevk9740m4m29mbept3qqm769sbr584h7q6latestvk9740m4m29mbept3qqm769sbr584h7q6mcpvk9740m4m29mbept3qqm769sbr584h7q6prooftrailvk9740m4m29mbept3qqm769sbr584h7q6recoveryvk9740m4m29mbept3qqm769sbr584h7q6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments