ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Metaso Search V2

v2.1.0

提供对 Metaso 搜索 API 的直接访问，支持网页搜索、内容读取和智能问答功能

⭐ 0· 1.1k·5 current·5 all-time
by@xinmh1338863
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Metaso search, web reader, chat) match the actual implementation: the code calls Metaso API endpoints and requires only METASO_API_KEY. No unrelated services, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md contains focused runtime instructions and example usage that map directly to the implemented functions. It does not instruct reading arbitrary local files, other environment variables, or exfiltrating data to unexpected endpoints.
✓
Install Mechanism
There is no install spec (instruction-only install). Code files are provided but no installer or external download is used; risk from install mechanism is low.
✓
Credentials
Only METASO_API_KEY is required and used by the code (Authorization header). The number and nature of environment variables is proportional to the stated purpose.
✓
Persistence & Privilege
Skill is not forced-always, is user-invocable, and does not request elevated/platform-wide privileges or modify other skills' configs. Autonomous invocation is allowed (platform default) and is not combined with other red flags.
Assessment
This skill appears coherent: it requires only METASO_API_KEY and contacts Metaso endpoints (https://metaso.cn). Before installing, confirm you trust the Metaso service and the skill author (repository/homepage is empty), limit the API key's scope if possible, store the key securely, and consider testing in an isolated environment. If you need stronger assurance, ask the publisher for a repository URL or signed package so you can review provenance and updates.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a1nca51ckb8k5k1cszfxeeh80yx6c

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvMETASO_API_KEY

Comments