ClawHub

Filewatch

v2.0.4

Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Filewatch concepts, best practices, and implementation patterns.

⭐ 0· 144·0 current·0 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (Filewatch reference for devtools) matches the provided assets: SKILL.md contains command docs and scripts/script.sh prints the same reference content. No unrelated credentials, binaries, or external services are requested. (Minor note: small version string mismatches between registry (2.0.4), SKILL.md (2.0.3) and the script VERSION=2.0.2 — this appears to be a bookkeeping issue, not a functionality or security concern.)
✓
Instruction Scope
SKILL.md explicitly states that commands output plain-text via heredoc and require no network access; the included script implements exactly that (no network calls, no file reads/writes beyond stdout, no env var access). The instructions do not ask the agent to read unrelated system files or transmit data externally.
✓
Install Mechanism
There is no install spec (instruction-only). The only shipped executable is a small shell script embedded in the package; nothing is downloaded or extracted at install time.
✓
Credentials
The skill declares no required environment variables, no credentials, and the runtime script does not read env vars or config paths. Requested access is minimal and appropriate for a static reference tool.
✓
Persistence & Privilege
always is false and the skill does not request persistent or elevated presence. It does not modify other skill configurations or system-wide settings.
Assessment
This skill appears to be a safe, read-only reference: it prints embedded documentation and does not contact external services or request secrets. If you want extra assurance, inspect scripts/script.sh (already included) before installing, and verify the repository/homepage provenance. The only minor issue is mismatched version strings (harmless bookkeeping). If you plan to let agents invoke skills autonomously, note this one has no network or credential access and thus a low blast radius.

Like a lobster shell, security has layers — review code before you run it.

latestvk975tmqtmg2532j9h6bvt7f82583hp2k

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments