ClawHub

Advisor.Bak

v1.0.0

Trusted advisor providing balanced, objective guidance on important decisions across business, personal finance, career, and strategy. Use when users need a...

⭐ 0· 57·1 current·1 all-time
byXingdong Zhang@xunhe730·fork of @jiwenbing/advisor (1.0.0)
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The name, description, and SKILL.md all describe a conversational advisor and the skill requests no binaries, env vars, or installs — this is coherent. Note: registry metadata vs. _meta.json contain different ownerId and slug values (registry: kn7dp3ztxfh90rnwdyw1r5w28981fkxw / advisor-bak; _meta.json: kn7eez1kaja86xm9ndkwrbextn832ace / advisor). This mismatch is a packaging/attribution inconsistency to verify with the publisher.
✓
Instruction Scope
SKILL.md contains only conversational guidance (listen, ask questions, analyze, recommend). It does not instruct reading files, accessing environment variables, or contacting external endpoints—no scope creep detected.
✓
Install Mechanism
No install spec and no code files—instruction-only skill means nothing is written to disk and there is no installer risk.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. There is no disproportionate credential request.
✓
Persistence & Privilege
always is false and defaults allow user invocation and autonomous invocation (platform default). The skill does not request permanent presence or elevated privileges.
Assessment
This skill appears to be a straightforward conversational advisor and does not request credentials or install anything — generally low risk. However, verify the publisher before installing because _meta.json and registry metadata disagree on ownerId/slug (possible repackaging or mistake). If you plan to discuss sensitive personal, financial, or corporate information with the skill, consider disabling autonomous invocation or limiting what data you share. If you want stronger assurance, ask the publisher for a homepage, contact, or signed provenance so you can confirm who published this skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk975cgmmtz74m48eq343th4hvs83t7zp

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments