openclaw/clawhub
1
0
Fork 0
mirror of https://github.com/openclaw/clawhub.git synced 2026-07-22 03:35:29 -04:00
Code Issues 183 Packages Projects Releases 1 Wiki Activity

[Bug] Skills flagged as suspicious despite Benign scan results (VirusTotal + OpenClaw) #166

New Issue
Closed
opened 2026-02-15 17:16:00 -05:00 by yindo · 1 comment
yindo commented 2026-02-15 17:16:00 -05:00
Owner
Copy Link
Copy Source

Originally created by @garibong-labs on GitHub (Feb 13, 2026).

Summary

Two skills published by @garibong-labs are flagged with "Skill flagged — suspicious patterns detected" banner despite both security scans returning Benign:

Affected Skills

1. brave-api-setup

  • VirusTotal: Benign ✅
  • OpenClaw scan: Benign, HIGH CONFIDENCE ✅
  • Flag: Still showing "suspicious patterns detected"
  • Downloads: 367+

2. ipo-alert

  • VirusTotal: Benign ✅
  • OpenClaw scan: Benign, HIGH CONFIDENCE ✅
  • Flag: Still showing "suspicious patterns detected"
  • Downloads: 198+

Expected Behavior

If both VirusTotal and OpenClaw scans return Benign with HIGH CONFIDENCE, the "suspicious patterns detected" flag should be automatically cleared.

Actual Behavior

The yellow warning banner persists even after both scans pass. This may discourage users from installing safe skills.

Notes

  • A third skill (olympic-alert) had the OpenClaw scan return Suspicious due to a SKILL.md description mismatch (said 10min but code used 15min). This was fixed and republished as v0.1.4. The flag on this one is understandable.
  • The two skills above have no such issues — scans are clean, yet flagged.

Environment

  • ClawHub CLI: v0.5.0
  • Publisher: @garibong-labs
Originally created by @garibong-labs on GitHub (Feb 13, 2026). ## Summary Two skills published by `@garibong-labs` are flagged with "Skill flagged — suspicious patterns detected" banner despite **both** security scans returning Benign: ## Affected Skills ### 1. [brave-api-setup](https://clawhub.ai/skills/brave-api-setup) - **VirusTotal**: Benign ✅ - **OpenClaw scan**: Benign, HIGH CONFIDENCE ✅ - **Flag**: Still showing "suspicious patterns detected" - **Downloads**: 367+ ### 2. [ipo-alert](https://clawhub.ai/skills/ipo-alert) - **VirusTotal**: Benign ✅ - **OpenClaw scan**: Benign, HIGH CONFIDENCE ✅ - **Flag**: Still showing "suspicious patterns detected" - **Downloads**: 198+ ## Expected Behavior If both VirusTotal and OpenClaw scans return Benign with HIGH CONFIDENCE, the "suspicious patterns detected" flag should be automatically cleared. ## Actual Behavior The yellow warning banner persists even after both scans pass. This may discourage users from installing safe skills. ## Notes - A third skill (`olympic-alert`) had the OpenClaw scan return Suspicious due to a SKILL.md description mismatch (said 10min but code used 15min). This was fixed and republished as v0.1.4. The flag on this one is understandable. - The two skills above have **no such issues** — scans are clean, yet flagged. ## Environment - ClawHub CLI: v0.5.0 - Publisher: @garibong-labs
yindo closed this issue 2026-02-15 17:16:00 -05:00
yindo commented 2026-02-15 17:16:01 -05:00
Author
Owner
Copy Link
Copy Source

@garibong-labs commented on GitHub (Feb 13, 2026):

Duplicate of #210. Closing.

@garibong-labs commented on GitHub (Feb 13, 2026): Duplicate of #210. Closing.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
pull-request
Mirrored from GitHub Pull Request
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: openclaw/clawhub#166
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?