Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Content Ideas

v1.0.0

Generate content ideas from multiple sources. Aggregates trends from RSS feeds, Reddit, Hacker News, X/Twitter, and web search. Outputs actionable content id...

0· 549·1 current·1 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (content idea aggregation from RSS/Reddit/HN/X/web) matches the instructions to pull from those sources and produce idea outputs. However, the SKILL.md instructs the agent to call other local skill scripts (e.g., a node script under /root/clawd/skills/rss-reader) and to read/write local config files, which is more system-level access than a simple 'content idea' generator normally requires.
!
Instruction Scope
The instructions tell the agent to execute host-local commands (node /root/clawd/skills/rss-reader/scripts/rss.js add ...) and to load files (brand-voice/profile.json, content-ideas/config.json) and write scheduled outputs to content-ideas/... — these are explicit file I/O and modification operations outside a purely read-only aggregation flow. They also direct modification of another skill's configuration (rss-reader). The SKILL.md gives broad discretion to 'check configured sources' and 'search for trending topics', which could lead to use of platform credentials or scraping without explicit constraints.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing will be downloaded or written at install time by the registry. The runtime instructions are where the risk appears (commands the agent may be told to run), not an installer.
Credentials
The skill declares no required env vars or credentials, which is consistent on its manifest. However, the SKILL.md expects access to external services (Twitter/X, possibly authenticated APIs for engagement metrics) via other skills (bird, x-twitter, web_search). Those integrations typically require API keys or tokens — the skill does not describe where credentials come from. Also, it instructs reading/writing local files (brand-voice/profile.json) without specifying path security or permission expectations.
!
Persistence & Privilege
The instructions explicitly instruct writing config and output files under content-ideas/ and recommend scheduling cron jobs to run generation tasks. More importantly, they show commands that modify another skill's configuration (rss-reader) by calling scripts under /root/clawd/skills/rss-reader — that constitutes modifying other skills' data/config and is a privilege escalation beyond touching only its own files.
What to consider before installing
This skill could do what it says, but review before enabling: 1) The SKILL.md tells the agent to execute a node script at /root/clawd/skills/rss-reader/scripts/rss.js which modifies another skill's feeds — verify that path and script exist and inspect its contents; do not allow arbitrary modification of other skills without review. 2) Confirm where credentials for X/Twitter or other APIs will come from; the manifest lists none, so the skill will rely on other installed skills or attempt unauthenticated scraping. 3) Check and sandbox any cron tasks and the read/write locations (content-ideas/, brand-voice/profile.json) to ensure they don't expose sensitive data. 4) Prefer use of official integrations (the rss-reader or x-twitter skills) through documented APIs rather than absolute host paths. If you want to proceed: inspect the rss.js script, ensure permissions are limited, run the skill in an isolated environment, and require explicit consent before it modifies other skills or system files.

Like a lobster shell, security has layers — review code before you run it.

latestvk971amc1jge87nxygwf48fz5yh81m0nf
549downloads
0stars
1versions
Updated 7h ago
v1.0.0
MIT-0

Content Ideas Generator

Turn trends into content. Aggregate from multiple sources, filter by niche, output actionable ideas.

How It Works

  1. Gather — Pull from RSS, Reddit, HN, X, web search
  2. Filter — Match to your niche and audience
  3. Analyze — What's trending? What angle is missing?
  4. Output — Actionable ideas with hooks and formats

Quick Start

Ask your agent:

"Generate 10 content ideas for this week. My niche is AI automation for small businesses."

The agent should:

  1. Check configured sources (RSS feeds, subreddits, etc.)
  2. Search for trending topics in your niche
  3. Cross-reference what's getting engagement
  4. Generate ideas with specific hooks and angles

Configuration

Store in content-ideas/config.json:

{
  "niche": "AI automation for small businesses",
  "audience": "non-technical founders, solopreneurs",
  "platforms": ["twitter", "linkedin", "blog"],
  
  "sources": {
    "rss": [
      "https://news.ycombinator.com/rss",
      "https://www.reddit.com/r/smallbusiness/.rss",
      "https://www.reddit.com/r/Entrepreneur/.rss"
    ],
    "subreddits": ["smallbusiness", "Entrepreneur", "SaaS", "artificial"],
    "twitter": {
      "accounts": ["@levelsio", "@marckohlbrugge", "@andrewchen"],
      "keywords": ["AI automation", "no-code", "solopreneur"]
    },
    "keywords": ["AI", "automation", "productivity", "small business", "startup"]
  },
  
  "filters": {
    "minEngagement": 100,
    "maxAgeDays": 7,
    "excludeKeywords": ["crypto", "NFT", "web3"]
  },
  
  "output": {
    "ideasPerRun": 10,
    "includeHooks": true,
    "includeFormats": true,
    "includeAngles": true
  }
}

Output Format

## Content Ideas - 2026-02-22

### Idea 1: [Title]
**Source:** r/smallbusiness trending post
**Why it's hot:** 500+ upvotes, addresses common pain point
**Your angle:** [How to spin for your audience]
**Hook options:**
- "Most small business owners waste 10 hours/week on this..."
- "I automated X and saved $2000/month. Here's how."
- "Stop doing [thing] manually. This is 2026."
**Formats:** Twitter thread, LinkedIn post, blog tutorial
**Engagement prediction:** High (solves clear pain point)

### Idea 2: [Title]
...

Source Integration

RSS Feeds (via rss-reader skill)

# Pre-configure feeds
node /root/clawd/skills/rss-reader/scripts/rss.js add "https://news.ycombinator.com/rss" --category tech
node /root/clawd/skills/rss-reader/scripts/rss.js add "https://www.reddit.com/r/Entrepreneur/.rss" --category business

Reddit (public RSS)

Reddit exposes RSS for any subreddit:

  • https://www.reddit.com/r/{subreddit}/.rss — new posts
  • https://www.reddit.com/r/{subreddit}/top/.rss?t=week — top this week

Hacker News

  • Front page: https://news.ycombinator.com/rss
  • Show HN: https://hnrss.org/show
  • Ask HN: https://hnrss.org/ask
  • By keyword: https://hnrss.org/newest?q=AI+automation

X/Twitter (via bird or x-twitter skills)

Search trending topics and high-engagement posts in your niche.

Web Search (via web_search tool)

Search for trending articles, news, and discussions.

Workflow

Daily Ideas (Cron)

Set up a daily cron to generate ideas:

Schedule: 07:00 daily
Task: Generate 5 content ideas based on overnight trends. Save to content-ideas/daily/YYYY-MM-DD.md

Weekly Content Calendar

Schedule: Sunday 20:00
Task: Generate 15-20 content ideas for the week. Organize by platform and day. Save to content-ideas/weekly/YYYY-WW.md

On-Demand Research

"What's trending in [niche] right now? Give me 5 content ideas I can post today."

Idea Categories

Reactive (Trending Now)

  • Breaking news response
  • Hot take on viral post
  • "Here's what everyone's missing about X"

Evergreen (Always Relevant)

  • How-to tutorials
  • Tool comparisons
  • Beginner guides
  • Common mistakes

Personal (Your Experience)

  • Behind-the-scenes
  • Lessons learned
  • Case studies
  • Failures and wins

Contrarian (Stand Out)

  • Unpopular opinions
  • Myth-busting
  • "Why I don't do X"

Hook Formulas

When generating ideas, include hooks:

  1. Problem-Agitate: "Most [audience] waste [time/money] on [thing]..."
  2. Curiosity Gap: "The one thing [successful people] do that nobody talks about..."
  3. Social Proof: "How [person] went from [A] to [B] in [time]..."
  4. Contrarian: "Unpopular opinion: [common belief] is wrong. Here's why..."
  5. How-To: "How to [achieve result] in [timeframe] (step-by-step)"
  6. List: "[Number] [things] every [audience] needs to know about [topic]"
  7. Story: "I [did thing] and [result]. Here's what happened..."

Integration with Brand Voice

When generating ideas, reference the brand voice profile:

1. Load brand-voice/profile.json
2. Match hooks to tone (casual vs professional)
3. Filter ideas by audience match
4. Adapt language to vocabulary preferences

Tips

  1. Quality over quantity — 5 good ideas beat 20 mediocre ones
  2. Cross-platform — One idea can be a thread, post, AND article
  3. Timeliness matters — Trending topics have a 24-48 hour window
  4. Your angle — Don't just report trends, add unique perspective
  5. Save rejects — Ideas that don't fit now might work later
  6. Track performance — What ideas convert to engagement?

Comments

Loading comments...