Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Landing Page Angle Tester

v1.0.0

针对同一产品生成多种 landing page 叙事角度,并标注适配人群和证据要求。;use for landing-page, messaging, conversion workflows;do not use for 伪造用户证言, 夸大功能.

0· 111·0 current·0 all-time
byvx:17605205782@52yuanchangxing
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (generate landing-page angles, mark audiences and evidence) match the included resources: spec.json, template.md, examples, and a Python script that produces structured briefs or directory/csv/pattern reports. Requested binary (python3) is appropriate and minimal.
Instruction Scope
SKILL.md instructs the agent to either run the included script or to generate output directly from the provided template/spec. The script can also scan arbitrary directories or files (it enumerates files, reads Markdown headings, scans CSVs, and searches for patterns). That capability is plausible for auditing/local report modes, but it means the agent must not be pointed at sensitive system directories or unknown user data. The SKILL.md correctly advises using baseDir and defaulting to read-only/dry-run behavior.
Install Mechanism
No install spec; it's instruction-only with a local Python script. No external downloads or package installs are performed. This is the lowest-risk install model.
Credentials
The skill requests no environment variables, no secrets, and only depends on python3. There are no credentials or config paths requested that are unrelated to its stated function.
Persistence & Privilege
always:false and no mechanism to persistently modify other skills or system-wide settings. The skill is user-invocable and can be invoked autonomously per platform defaults; that is expected and not excessive here.
Assessment
This skill appears coherent and local-only: it uses python3 and local templates to produce structured landing-page briefs. Important cautions before running it: (1) If you run the included script, pass only safe inputs (eg. files inside the skill directory or sanitized examples); do not point it at your home directory, system directories, or folders with secrets, because the script can list and read text files and produce reports. (2) If you prefer zero disk/file access, follow SKILL.md’s fallback and ask the agent to produce output directly from the template/spec without executing the script. (3) Review all generated copy before publishing (the skill itself warns against fabricating testimonials or exaggerating features). (4) If you need higher assurance, run the script in an isolated environment (container or ephemeral VM) and inspect its outputs and logs.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f18j9pt1e7bwtcamjc82mas83591c

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🎯 Clawdis
OSmacOS · Linux · Windows
Binspython3

Comments