Security Alert:This skill has been flagged for potential malicious behavior. Installation is blocked.

alias-gen

Blocked·Scanned 2/18/2026

Dangerous skill that reads process.env.HISTFILE (e.g., ~/.zsh_history) and sends the raw history to OpenAI via openai.chat.completions.create. It claims to "filter out commands with sensitive data" while the code embeds and transmits history in userContent.

from clawhub.ai·v602d98e·34.8 KB·0 installs
Scanned from 1.0.1 at 602d98e · Transparency log ↗
$ vett add clawhub.ai/lxgicstudios/alias-genInstallation blocked

ai-alias

Generate useful shell aliases from your command history

Install

npm install -g ai-alias

Usage

npx ai-alias

Setup

export OPENAI_API_KEY=sk-...