← Back to Skills Marketplace
tshogx

hello-example

by Shiwen Han · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
252
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install hello-example
Description
A minimal example skill demonstrating .clawhubignore — the secret.md file should NOT appear in the published version.
README (SKILL.md)

Hello Example

This is a test skill to verify .clawhubignore works correctly.

What this skill does

Nothing useful. It exists to test whether secret.md gets excluded on publish.

If you downloaded this skill from ClawHub and can see secret.md in the folder — the ignore mechanism is broken. If secret.md is absent — it works correctly.

Usage Guidance
This package is suspicious because it claims secret.md should have been excluded yet the published bundle contains that file and its contents. Although the included api_key and path look fake, treat this as a data-leak risk. Before installing: (1) do not run or grant credentials to the skill; (2) inspect the files yourself and remove secret.md if you publish or install locally; (3) ask the author to republish without secret.md and to confirm the values are not real; (4) avoid installing into environments where the exposed vault_path or keys might overlap with your real secrets. If the author removes secret.md (or confirms the content is demonstrably dummy and safe), this would reduce concern.
Capability Analysis
Type: OpenClaw Skill Name: hello-example Version: 1.0.0 This skill bundle is a minimal test case designed to verify the functionality of the .clawhubignore mechanism. It contains a SKILL.md file explaining its purpose and a secret.md file containing placeholder sensitive information (a fake API key and vault path) intended to be excluded from publication. There is no executable code or evidence of malicious intent.
Capability Assessment
Purpose & Capability
The skill description's purpose is to demonstrate that .clawhubignore excluded secret.md, yet the published package contains secret.md (and its contents are reproduced in SKILL.md). That contradicts the stated purpose and suggests the ignore mechanism failed or the author accidentally published a secret file.
Instruction Scope
SKILL.md only instructs the agent to check whether secret.md is present, which is reasonable for a test. However, SKILL.md also includes the full contents of secret.md in the 'File contents' section, effectively publishing the secret. The instructions do not direct network exfiltration or other actions, but they do disclose sensitive-looking data in the package itself.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk or installed at runtime by the skill itself.
Credentials
The skill declares no required environment variables (which is appropriate), but the package includes a file that contains an api_key and a local vault_path. Publishing such credentials (even if fake) is disproportionate and risky because real secrets might be exposed the same way.
Persistence & Privilege
The skill does not request persistent or elevated privileges (always:false, no config paths, no installs). It is not asking to modify other skills or system settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install hello-example
  3. After installation, invoke the skill by name or use /hello-example
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of hello-example, a minimal skill to demonstrate proper use of .clawhubignore. - Tests that secret.md is excluded from published versions to verify the ignore mechanism works correctly.
Metadata
Slug hello-example
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is hello-example?

A minimal example skill demonstrating .clawhubignore — the secret.md file should NOT appear in the published version. It is an AI Agent Skill for Claude Code / OpenClaw, with 252 downloads so far.

How do I install hello-example?

Run "/install hello-example" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is hello-example free?

Yes, hello-example is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does hello-example support?

hello-example is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created hello-example?

It is built and maintained by Shiwen Han (@tshogx); the current version is v1.0.0.

💬 Comments