sure

Name: sure
Rating: 2.85 (1 reviews)
Author: bt0r

#3233 · by bt0r

skill openclaw agent-skill

2.85/ 5.00

cautionBeta

Mar 4, 2026 at 4:54 AM6 signals analysedNo manual reviews · fully automated

Trust Signal Breakdown

high6 sub-signals across 6 dimensions

CVEs, dependency health, and supply chain integrity

1 of 1 sub-signals with data

virustotal scan100%2.5

Uptime, latency, error rates, and incident history

1 of 1 sub-signals with data

content safety100%3.5

Commit recency, release cadence, issue response, CI/CD

1 of 1 sub-signals with data

freshness100%3.4

Downloads, stars, dependents, and growth trajectory

1 of 1 sub-signals with data

adoption100%0.6

License, documentation, security policy, changelog

1 of 1 sub-signals with data

transparency100%3.0

Track record, org maturity, community standing

1 of 1 sub-signals with data

publisher reputation100%3.5

About this score

Scored across 6 sub-signals in 6 dimensionsScoring engine v1 (beta) — actively being expandedPhase 1: Core sub-signal architecture (live)Phase 2: Permission scope & expanded collection (in progress)

Signal Detailsfrom signal_history

VirusTotal Scan2.5

PENDING

ClawHub submits every skill to VirusTotal on publish. Scanned by 70+ security vendors for malware, trojans, and suspicious patterns.

Source: ClawHub moderation

Content Safety3.5

1 FINDING

⚠ credential_leak: curl\s+[^\n]*\$[A-Z_]*(?:KEY|TOKEN|SECRE

Scanned for credential leaks, shell injection, config tampering, base64 payloads, sensitive path access, SOUL.md/AGENTS.md tampering.

651 characters analyzed

Publisher Reputation3.4

GitHubbt0r

Account age9.4 years

Public repos12

Adoption0.6

Installs0

Downloads1,439

Stars0

Comments0

View on ClawHub

Freshness3.0

Last updated4d ago

Latest versionv1.0.0

Versions published1

ChangelogPresent

Transparency3.5

6/6 checks passed100%

✓ Has Changelog✓ No Obfuscation✓ Has Description✓ Has Frontmatter✓ Declares Env Vars✓ Has Usage Instructions

Trust AssessmentAI Assessment

Sure is a Skill published by bt0r under unknown license that retrieves financial reports from the Sure personal financial board application via API. The service shows low adoption (0 stars) and requires user-provided API credentials to access what appears to be a self-hosted financial management system. Connecting financial data through an unestablished service with no clear licensing presents material risk, particularly given the sensitivity of personal financial information and the requirement to expose API keys.

Generated by Fabric AI · Mar 4, 2026 at 4:54 AM

Incidents & Alertslast 90 days

Feb 25Trust score increased by 2.552.55

Feb 25sure added to Trust Index3.00

Showing 3 of 3 events

Score History5 snapshots

5.003.752.501.250.00

Feb 25Mar 2

Data Sources4 indexed

◎

VirusTotalMalware scanning by 70+ security vendors

◈