openclaw/clawhub
1
0
Fork 0
mirror of https://github.com/openclaw/clawhub.git synced 2026-07-22 03:35:29 -04:00
Code Issues 183 Packages Projects Releases 1 Wiki Activity

My HZL skill incorrectly flagged as suspicious #121

New Issue
Open
opened 2026-02-15 17:15:48 -05:00 by yindo · 0 comments
yindo commented 2026-02-15 17:15:48 -05:00
Owner
Copy Link
Copy Source

Originally created by @tmchow on GitHub (Feb 11, 2026).

Summary

My hzl skill published is flagged with "suspicious patterns detected" by VirusTotal Code Insight, preventing normal installation via clawhub install.

Affected Skill

Skill URL
hzl https://clawhub.ai/tmchow/hzl

Details

When running clawhub install hzl or the upgrade script, the installer warns:

⚠️ Warning: "hzl" is flagged as suspicious by VirusTotal Code Insight.
This skill may contain risky patterns (crypto keys, external APIs, eval, etc.)
hzl: skipped (use --force to update suspicious skills)

This is a false positive. The skill uses an CLI if it's available and the skill is instructions based on how to use the CLI.

Expected Behavior

The suspicious flag should not be applied to this skill. Installation should proceed without requiring --force.

Request

Please review and remove the incorrect flag from the hzl skill.

Thanks!

Originally created by @tmchow on GitHub (Feb 11, 2026). ## Summary My `hzl` skill published is flagged with "suspicious patterns detected" by VirusTotal Code Insight, preventing normal installation via `clawhub install`. ## Affected Skill | Skill | URL | |-------|-----| | hzl | [https://clawhub.ai/tmchow/hzl](https://clawhub.ai/tmchow/hzl) | ## Details When running `clawhub install hzl` or the upgrade script, the installer warns: > ⚠️ Warning: "hzl" is flagged as suspicious by VirusTotal Code Insight. > This skill may contain risky patterns (crypto keys, external APIs, eval, etc.) > hzl: skipped (use --force to update suspicious skills) This is a false positive. The skill uses an CLI if it's available and the skill is instructions based on how to use the CLI. ## Expected Behavior The suspicious flag should not be applied to this skill. Installation should proceed without requiring `--force`. ## Request Please review and remove the incorrect flag from the hzl skill. Thanks!
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
pull-request
Mirrored from GitHub Pull Request
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: openclaw/clawhub#121
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?