openclaw/clawhub
1
0
Fork 0
mirror of https://github.com/openclaw/clawhub.git synced 2026-07-21 19:25:25 -04:00
Code Issues 183 Packages Projects Releases 1 Wiki Activity

Security Scanner False Positive: xiao-fan-ka and half-full skills flagged as suspicious #120

New Issue
Open
opened 2026-02-15 17:15:47 -05:00 by yindo · 0 comments
yindo commented 2026-02-15 17:15:47 -05:00
Owner
Copy Link
Copy Source

Originally created by @OakcoderX on GitHub (Feb 11, 2026).

Summary

The ClawHub security scanner has flagged two skills published by @OakcoderX with "suspicious patterns detected". Both are false positives.

Affected skills:

  • xiao-fan-ka (小饭卡 v0.3.4) — restaurant recommendation skill
  • half-full (半饱 v0.1.3) — mindful eating companion skill

ClawHub pages:

What These Skills Do

xiao-fan-ka (小饭卡)

A restaurant recommendation skill that searches Dianping and Xiaohongshu for restaurant info, builds a local taste profile, and recommends restaurants with cross-source verification.

half-full (半饱)

A wellness/diet companion that tracks meals via photos and text, stores food logs locally, and provides nutrition insights. Happiness-first approach, no gym guilt.

Why These Are False Positives

The scanner likely flagged them because:

  • External network requests — xiao-fan-ka searches DuckDuckGo with site:dianping.com queries. This is core search functionality, not data exfiltration.
  • File read/write — Both skills read/write local JSON files (taste profiles, food logs). Purely local storage.

There is:

  • ❌ No environment variable harvesting
  • ❌ No Base64 encoded payloads
  • ❌ No outbound data exfiltration
  • ❌ No credential collection
  • ❌ No obfuscated code

All source code is plain Python scripts, fully readable and open.

Request

Please review and remove the false positive flags from both skills.

Skill Contents

xiao-fan-ka

  • SKILL.md / AGENT_GUIDE.md / README.md
  • scripts/search_all.py — Search script (DuckDuckGo queries)
  • scripts/taste_profile.py — Local taste profile manager
  • data/taste-profile.json — Local user data (never transmitted)

half-full

  • SKILL.md / AGENT_GUIDE.md / README.md
  • scripts/log.py — Meal logging
  • scripts/food_db.py — Local food nutrition database
  • data/log.json — Local food log (never transmitted)

Labels

bug, security

Originally created by @OakcoderX on GitHub (Feb 11, 2026). ## Summary The ClawHub security scanner has flagged two skills published by @OakcoderX with "suspicious patterns detected". Both are false positives. **Affected skills:** - `xiao-fan-ka` (小饭卡 v0.3.4) — restaurant recommendation skill - `half-full` (半饱 v0.1.3) — mindful eating companion skill **ClawHub pages:** - https://clawhub.com/skills/xiao-fan-ka - https://clawhub.com/skills/half-full ## What These Skills Do ### xiao-fan-ka (小饭卡) A restaurant recommendation skill that searches Dianping and Xiaohongshu for restaurant info, builds a local taste profile, and recommends restaurants with cross-source verification. ### half-full (半饱) A wellness/diet companion that tracks meals via photos and text, stores food logs locally, and provides nutrition insights. Happiness-first approach, no gym guilt. ## Why These Are False Positives The scanner likely flagged them because: - **External network requests** — `xiao-fan-ka` searches DuckDuckGo with `site:dianping.com` queries. This is core search functionality, not data exfiltration. - **File read/write** — Both skills read/write local JSON files (taste profiles, food logs). Purely local storage. There is: - ❌ No environment variable harvesting - ❌ No Base64 encoded payloads - ❌ No outbound data exfiltration - ❌ No credential collection - ❌ No obfuscated code All source code is plain Python scripts, fully readable and open. ## Request Please review and remove the false positive flags from both skills. ## Skill Contents ### xiao-fan-ka - `SKILL.md` / `AGENT_GUIDE.md` / `README.md` - `scripts/search_all.py` — Search script (DuckDuckGo queries) - `scripts/taste_profile.py` — Local taste profile manager - `data/taste-profile.json` — Local user data (never transmitted) ### half-full - `SKILL.md` / `AGENT_GUIDE.md` / `README.md` - `scripts/log.py` — Meal logging - `scripts/food_db.py` — Local food nutrition database - `data/log.json` — Local food log (never transmitted) ## Labels bug, security
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
pull-request
Mirrored from GitHub Pull Request
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: openclaw/clawhub#120
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?