Is lexiang-private-skills safe to install?

lexiang-private-skills was flagged as MEDIUM RISK (risk score 12) with 2 findings detected across 28 files. Review the findings before installing.

What security issues were found in lexiang-private-skills?

Sigil detected 2 findings in lexiang-private-skills, including patterns related to network_exfil. See the full scan report for details.

Scans/clawhub/lexiang-private-skills

lexiang-private-skills

clawhub

Summary

lexiang-private-skills v1.0.0 was classified as MEDIUM RISK with a risk score of 12. Sigil detected 2 findings across 28 files, covering phases including network exfiltration. Review the findings below before installing this package.

Package description: 乐享知识库 MCP 全功能 Skill（私有化部署版）。当用户提到「乐享」「知识库」「个人知识库」「我的知识库」「lexiang」，或提供乐享链接，或涉及知识库的搜索/写入/编辑/文件/配置等操作时使用。

MEDIUM RISK(12)

v1.0.0

19 July 2026, 22:16 UTC

by Sigil Bot

Risk Score

Findings

Files Scanned

Provenance

Registry

https://clawhub.com/skills/lexiang-private-skills

Scanned From

https://clawhub.ai/api/v1/download?slug=lexiang-private-skills&version=1.0.0

Findings by Phase

•

Phase Ordering

Phases are ordered by criticality, with the most dangerous at the top. Click any phase header to expand or collapse its findings. Critical phases are expanded by default.

Badge

Markdown

[![Sigil Scan](https://sigilsec.ai/badge/clawhub/lexiang-private-skills)](https://sigilsec.ai/scans/99C242BD-4270-4372-9577-7026749D714C)

HTML

<a href="https://sigilsec.ai/scans/99C242BD-4270-4372-9577-7026749D714C"><img src="https://sigilsec.ai/badge/clawhub/lexiang-private-skills" alt="Sigil Scan"></a>

Run This Scan Yourself