SKILLEMALL.ai
GitHub ↗ RU Sign in

BC iran-chem-database

Iran Chemical Database — live, dated, auditable, BEST-EFFORT index of chemical offerings in configured public Iranian supplier catalogues (websites + public Telegram channels). HTTrack/WooCommerce-REST/Telegram mirroring → local-only parsing → RDKit/PubChem/CAS-validated PostgreSQL with FastAPI + Streamlit. Fail-closed Iranian-suppliers-only country gate; coverage measured and published, never claimed complete. Installation = software + queued crawl, not a populated dataset. Ships a 1399-molecule CID-unique confirmed-organic seed baseline (v2.22, 2026-08-27: v2.19 primary + live Telegram/WooCommerce/sitemap crawl + 5-model fleet normalization, every new identity PubChem-confirmed). For academic procurement research.

ClawHub Agent Skills v2.22.4 80 files · 1 script body ≈ 2 112 tokens Open the sourceclawhub.ai↗ analyzed 3 d ago

As a process C 52/100 · Has gaps — weak spots: result and completion, when it triggers, inputs and preconditions

AnalyzerPostgreSQLTelegramWordPressInfrastructureData and analyticsResearchtype and topics are labelled automatically from the skill text
Runs in: OpenClaw Claude / Claude Code ChatGPT / Codex Gemini CLI Cursor GitHub Copilot / VS Code Qwen Code Kimi Code CLI Z.ai (GLM) DeepSeek (Deep Code) Mistral Vibe LangChain (deepagents) Goose OpenCode
JSON
Technical rating
B
80/100
safety, quality, tests
Safety 60%
88
Quality 40%
68
Run on models
none yet
Process rating
C
52/100
Has gaps
Result and completion w 14
0
Progress reporting w 2
0
When it triggers w 12
20
the three weakest of ten parameters · all ten

The same skill appears in 1 more place: ClawHub

How to improve

  1. Say in the description WHEN to use the skill ("use when…", example requests): that is the agent's main cue.
For the model run — optional
  • Your own cases (evals/evals.json, 4–6 real requests with expected answers): the full check would then run those instead of a model-drafted suite.
  • A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.

Guard findings · 12

✓ No critical or high findings

Medium and low: 12
  • low Secrets in code secret-high-entropy-token data/seed_export/iran_organic_molecules_parallel_ai_2026-08-24.csv:4
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "(1S,3Z)-3-[(2E)-2-[(1R,3aS,7aR)-1-[(E,2R,5R)-5,6-di…-yl]-7a-…l-2,3,3a,5,6,7-he…ene]ethylidene]-4-m…-ol","(1S,3Z)-3-[(2E)-2-[(1R,3aS,7aR)
    quoted
  • low Secrets in code secret-high-entropy-token data/seed_export/iran_organic_molecules_parallel_ai_2026-08-24.csv:39
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "(3S,8S,9S,10R,13R,14S,17R)-10,13-d…17-[(2R)-6-m…-yl]-2,3,4,7,8,9,11,12,14,15,16,17-d…nta[a]phen…-ol","(3S,8S,9S,10R,13R,14S,17R)-10,13-d…17-[(2R)
    quoted
  • low Secrets in code secret-high-entropy-token data/seed_export/iran_organic_molecules_parallel_ai_2026-08-24.csv:86
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "2,2,2-tr…ide","2,2,2-tr…ide",,,32510,C6H12F3NOSi,true,seed,Telegram: minatajhiz,1,,,,,,,,,seed,2efb…f80
    quoted
  • low Secrets in code secret-high-entropy-token data/seed_export/iran_organic_molecules_parallel_ai_2026-08-24.csv:185
    High-entropy token-like string (may be an id, hash or a credential)
    4-ch…ine,4-ch…ine | 4-Ch…ine,,OBHKONRNYCDRKM-UHFFFAOYSA-N,80977,C14H9ClN2,true,ai_verified,ChemIranSanat; Telegram: ChemIranSanat,2,,,,,,,t.
  • low Secrets in code secret-high-entropy-token data/seed_export/iran_organic_molecules_parallel_ai_2026-08-24.csv:278
    High-entropy token-like string (may be an id, hash or a credential)
    disodium;2-(3-hy…-yl)-3-o…ate,disodium;2-(3-hy…-yl)-3-o…ate,860-22-0,,2723854,C16H…8S2,true,seed,TamadKala,1
  • low Secrets in code secret-high-entropy-token data/seed_export/iran_organic_molecules.csv:32
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "2,2,2-tr…ide",,32510,MSPCIZMDDUQPGJ-UHFFFAOYSA-N,C6H12F3NOSi,,,N-methyl-N-(trimethylsilyl)trifluoroacetamide,,organic,structured_pubchem,substance,research,Merck
    quoted
  • low Secrets in code secret-high-entropy-token data/seed_export/iran_organic_molecules.csv:42
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "2,6-di…nol",128-37-0,31404,NLZUEZXRPGMBCV-UHFFFAOYSA-N,C15H24O,220.35,,"2,6-Di…nol","2,6-di…nol",organic,ai_resolved+cas_only+pubchem,s
    quoted
  • low Secrets in code secret-high-entropy-token data/seed_export/iran_organic_molecules.csv:67
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    3-et…yde,,8467,CBOQJANXLMLOSS-UHFFFAOYSA-N,C9H10O3,,,Ethylvanillin,,organic,structured_pubchem,substance,research,,,,value=250.0 unit=ml normalised_value=250.0 normalised_unit=ml
    quoted
  • low Secrets in code secret-high-entropy-token data/seed_export/iran_organic_molecules.csv:71
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    3-tr…ine,,13521,WYTZZXDRDKSJID-UHFFFAOYSA-N,C9H23NO3Si,,,(3-Am…pyl)triethoxysilane,,organic,structured_pubchem,substance,research,Exir,,,,,,1,telegram:minatajhiz,2,https://t
    quoted
  • low Secrets in code secret-high-entropy-token data/seed_export/iran_organic_molecules.csv:77
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    4-ch…ine,,80977,OBHKONRNYCDRKM-UHFFFAOYSA-N,C14H9ClN2,,,4-ch…ine,,organic,structured_pubchem,substance,research,Exir,002295,,value=5.0 unit=g normalised_value=5
    quoted
  • low Exfiltration read-dotenv docs/deployment_guide.md:6
    Reads a .env file (documentation of a security skill)
    cp .env.example .env      # set DB_PASSWORD (and optionally SEARCH_API_KEY)
    security skill
  • low Exfiltration read-dotenv SKILL.md:61
    Reads a .env file (documentation of a security skill)
    cp .env.example .env           # REQUIRED: strong DB_PASSWORD (installer refuses placeholders)
    security skill

Files scanned: 80. Evidence is masked. Grey chips explain why severity was lowered.

Against the Agent Skills spec

  • warning description-no-when description does not say WHEN to use the skill (no "use when")
  • note frontmatter-key unknown frontmatter key "categories"
  • note frontmatter-key unknown frontmatter key "topics"

Process rating: all ten parameters 52/100

  • 0Result and completion. Does not say what the result is
  • 0Progress reporting. Says nothing while it works
  • 20When it triggers. No condition that starts the skill
  • 30Inputs and preconditions. Does not say what the process needs to start
  • 30Running it twice. 4 mutating operations with no state check
  • 50Failures and branches. 0 branches, has a failure section
  • 60Tools and files. Uses tools (bash, web, python) that frontmatter does not declare
  • 100Steps. 6 steps
  • 100Consistency. Name and required fields are in place
  • 100Execution cost. Instruction body is 2112 tokens
  • medium Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing

Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.

Quality signals

  • +5Description has no quoted example phrases that should trigger the skill
  • +4Description does not say when NOT to use the skill (false activations)
  • +3Output format is not stated: the model decides each time
  • -2localhost URLs: will not work for another user
  • -45 reference files, but SKILL.md never points to them: the model will not open them
  • +2Single-language instructions
  • +3Description length 725: enough signal without eating the budget
  • +4Structure: 7 headings
  • +3Step-by-step instructions: 6 items
  • +4Has examples (2 code blocks)
  • +3All 2 scripts are documented
  • +1License stated

Quality base 70; lint remarks subtract, signals add up to 100. Result: 68.

External checks

ClawHub: suspicious
This looks like a genuine chemical-catalogue crawler, but it needs Review because its default deployment exposes sensitive services and runs broad scheduled crawling with external relay and optional AI-provider paths.
LLM: suspicious (high)