Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Leaderboard

Leaderboard makes gaming & entertainment simple. Record, search, and analyze your data with clear terminal output.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 39 · 0 current installs · 0 all-time installs
bybytesagain4@xueyetianya
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The description and SKILL.md describe a local CLI tool that stores data offline and provides export/search features — that matches the provided script. However, SKILL.md instructs users to run a 'leaderboard' command, yet there is no install spec to create that command (the repository includes scripts/script.sh but no instructions to install it into PATH). The registry version (1.0.1) and SKILL.md version string (v2.0.0) also mismatch. These are coherence/usability problems (not direct evidence of malicious intent) but they are unexpected and should be clarified.
Instruction Scope
SKILL.md and the script operate locally and limit actions to reading/writing under $HOME/.local/share/leaderboard and running common coreutils (grep, tail, du, wc). They do not reference external endpoints, unrelated system paths, or request additional environment variables. The script logs user inputs and reads local log files for exports and searches — all consistent with a leaderboard tool.
Install Mechanism
There is no install specification (lowest-risk model), which is consistent with instruction-only skills. However, the presence of a runnable shell script but no guidance on how to install or invoke it (e.g., symlink into PATH or run via a wrapper) is inconsistent with the SKILL.md examples that use the 'leaderboard' command. This is a quality/usability gap and may cause users to manually move or run the script — manual installation should be done after code review.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The script uses only $HOME (to build ~/.local/share/leaderboard) which is proportional to the stated purpose.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system settings, and does not persist beyond creating its own data directory under the user's home. Autonomous invocation is allowed by default, but that is normal for skills and not a unique concern here.
What to consider before installing
This skill's behavior is mostly coherent with a simple local leaderboard: it stores logs under ~/.local/share/leaderboard, has export/search/status commands, and does not contact the network or request secrets. Before installing or running it, review the scripts/script.sh yourself (it will append user input to log files and use grep/tail/du/wc), and be aware that user input is not escaped for JSON export (export may produce malformed JSON if entries include quotes). Note the SKILL.md shows a v2.0.0 string while the registry lists v1.0.1, and there is no install instruction to create the 'leaderboard' command shown in the docs — you will need to place the script on PATH or create a wrapper. If you want to be cautious: run the script in a disposable/sandboxed environment, verify the bytesagain.com feedback/contact URLs independently, and only give it a dedicated data directory or backup/remove the created ~/.local/share/leaderboard if you decide not to keep it.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.1
Download zip
latestvk977j139t4x0z7p5054p4k9qcs830rah

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Leaderboard

Leaderboard makes gaming & entertainment simple. Record, search, and analyze your data with clear terminal output.

Why Leaderboard?

  • Works entirely offline — your data never leaves your machine
  • Simple command-line interface, no GUI needed
  • Export to JSON, CSV, or plain text anytime
  • Automatic history and activity logging

Getting Started

# See what you can do
leaderboard help

# Check current status
leaderboard status

# View your statistics
leaderboard stats

Commands

CommandWhat it does
leaderboard rollRoll
leaderboard scoreScore
leaderboard rankRank
leaderboard historyHistory
leaderboard statsStats
leaderboard challengeChallenge
leaderboard createCreate
leaderboard joinJoin
leaderboard trackTrack
leaderboard leaderboardLeaderboard
leaderboard rewardReward
leaderboard resetReset
leaderboard statsSummary statistics
leaderboard export<fmt> Export (json
leaderboard search<term> Search entries
leaderboard recentRecent activity
leaderboard statusHealth check
leaderboard helpShow this help
leaderboard versionShow version
leaderboard $name:$c entries
leaderboard Total:$total entries
leaderboard Datasize: $(du -sh "$DATA_DIR" 2>/dev/null
leaderboard Version:v2.0.0
leaderboard Datadir: $DATA_DIR
leaderboard Entries:$(cat "$DATA_DIR"/*.log 2>/dev/null
leaderboard Disk:$(du -sh "$DATA_DIR" 2>/dev/null
leaderboard Last:$(tail -1 "$DATA_DIR/history.log" 2>/dev/null
leaderboard Status:OK
leaderboard [Leaderboard]roll: $input
leaderboard Saved.Total roll entries: $total
leaderboard [Leaderboard]score: $input
leaderboard Saved.Total score entries: $total
leaderboard [Leaderboard]rank: $input
leaderboard Saved.Total rank entries: $total
leaderboard [Leaderboard]history: $input
leaderboard Saved.Total history entries: $total
leaderboard [Leaderboard]stats: $input
leaderboard Saved.Total stats entries: $total
leaderboard [Leaderboard]challenge: $input
leaderboard Saved.Total challenge entries: $total
leaderboard [Leaderboard]create: $input
leaderboard Saved.Total create entries: $total
leaderboard [Leaderboard]join: $input
leaderboard Saved.Total join entries: $total
leaderboard [Leaderboard]track: $input
leaderboard Saved.Total track entries: $total
leaderboard [Leaderboard]leaderboard: $input
leaderboard Saved.Total leaderboard entries: $total
leaderboard [Leaderboard]reward: $input
leaderboard Saved.Total reward entries: $total
leaderboard [Leaderboard]reset: $input
leaderboard Saved.Total reset entries: $total

Data Storage

All data is stored locally at ~/.local/share/leaderboard/. Each action is logged with timestamps. Use export to back up your data anytime.

Feedback

Found a bug or have a suggestion? Let us know: https://bytesagain.com/feedback/


Powered by BytesAgain | bytesagain.com | hello@bytesagain.com

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…