Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Mardown Notes Organizer

v1.0.1

A note organization and knowledge-linking tool that analyzes the directory structure, reorganizes notes according to the user's chosen classification scheme,...

0· 54·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, README, SKILL.md and organize_notes.py are coherent: they all describe scanning a local Markdown directory, creating directories, moving files, analyzing similarity, and inserting Obsidian-style links. No unrelated credentials, binaries, or install steps are requested.
!
Instruction Scope
Runtime instructions and the script instruct the agent/user to move files and optionally delete files/empty directories. These are within the stated purpose but are destructive operations. SKILL.md and README state a backup and undo are supported, but the provided organize_notes.py source listing is truncated and the backup/undo/cleanup implementations could not be fully inspected; that uncertainty increases risk.
Install Mechanism
No install spec and no external downloads. This is instruction+script only, so nothing is being fetched or installed automatically.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The script operates on the filesystem in the provided directory only, which is proportionate to the purpose.
Persistence & Privilege
Skill is not marked always:true and does not request persistent system-wide privileges. It operates on the user-supplied directory and does not declare any capability to modify other skills or global agent settings.
What to consider before installing
This skill appears internally consistent with a local notes reorganizer, but it performs file moves and optional cleanup (deleting duplicates/empty directories). Before installing or running it: 1) make a full backup or run it on a copy of your notes; 2) review the complete organize_notes.py (the provided source listing was truncated) to confirm how backups, undo, and deletions are implemented; 3) test on a small sample directory first; 4) inspect the generated .organize_log.json and any undo functionality before applying to your main vault; 5) if you need stronger guarantees, ask the author for a full source listing and a dry-run mode or add explicit dry-run support yourself.

Like a lobster shell, security has layers — review code before you run it.

latestvk970nxs9vx0kangy6cd1nj5ev98408k1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments