ClawHub

test-upload-skill

v1.0.1

A simple test skill for verifying clawhub.ai upload functionality

⭐ 0· 120·0 current·0 all-time
byRick@xiaoshitou1
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The skill name, description, and instructions all describe a simple upload/test reporter and there are no extra env vars, binaries, or installs requested. Minor inconsistency: the SKILL.md response template prints Version: 1.0.0 while the registry/_meta.json list version 1.0.1; registry ownerId (kn7ey...) also differs from _meta.json ownerId ('test-owner-id'). These are likely innocuous metadata mismatches but worth confirming.
✓
Instruction Scope
SKILL.md contains only instructions to return a simple status message with the current timestamp and verify local skill components. It does not instruct reading files, accessing env vars, network endpoints, or transmitting data externally.
✓
Install Mechanism
No install spec and no code files are included (instruction-only). Nothing is written to disk or downloaded by the skill itself.
✓
Credentials
The skill requests no environment variables, no credentials, and no config paths—proportional to its stated test purpose.
✓
Persistence & Privilege
always is false and the skill is user-invocable; disable-model-invocation is false (normal default). There is no evidence the skill requests permanent presence or elevated privileges.
Assessment
This appears to be a safe, minimal test skill for verifying upload and invocation. Before installing, you may want to: 1) confirm the publisher/repository linked in SKILL.md (https://github.com/test/test-upload-skill) matches the registry owner, since _meta.json ownerId and the registry ownerId differ; 2) note the minor version mismatch between the SKILL.md output (1.0.0) and registry/_meta.json (1.0.1); and 3) if you prefer to prevent any skill from running autonomously, disable model invocation on the agent—though allowing autonomous invocation is the platform default and not unusual for harmless skills.

Like a lobster shell, security has layers — review code before you run it.

latestvk974vged926gwqjpk99b0pk2nn83kt1z

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments