ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

YT Shorts Niche Research

v1.0.0

Find viral YouTube Shorts channels that started recently and are doing really well. Use when Abdullah asks to find shorts niches, find channels, research You...

⭐ 0· 53·0 current·0 all-time
by@abdullahsarumi16-stack
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The name/description claim simple YouTube Shorts research, but the SKILL.md requires running a local Node script at a hardcoded path (C:\Users\sarum\.openclaw\workspace\youtube-research.js), expects browser/incognito behavior, and relies on producing JSON output and Telegram delivery. The skill bundle contains no script, no install instructions, and declares no required binaries (node, browser driver) or credentials that these actions would reasonably need.
!
Instruction Scope
Runtime instructions tell the agent to run a long-lived background script repeatedly (polling up to N rounds, rerunning on partial results), write result files (youtube-research-YYYY-MM-DD.json), update HEARTBEAT.md, and 'send results to Abdullah on Telegram unprompted' weekly. It also mandates not reading the full JSON in the main session and to spawn a subagent to read it. These steps go beyond a simple query/lookup flow and require filesystem access, repeated execution, and external network actions.
!
Install Mechanism
There is no install spec and no code files included, yet the SKILL.md assumes an existing script and runtime (node) on a specific Windows path. Calling node and running background browser/incognito sessions implies additional packages (puppeteer, headless browser) not declared. The mismatch between 'no install' and the heavy runtime requirements is a red flag.
!
Credentials
The skill declares no required environment variables or credentials, but instructions require sending messages to Telegram (which would need a bot token) and likely need YouTube API access or browser credentials/cookies for incognito scraping. The hardcoded user path (sarum) also suggests expectation of a specific user's environment. Requesting external communications without declaring required credentials is disproportionate and opaque.
!
Persistence & Privilege
The SKILL.md instructs an automatic weekly run and unprompted Telegram delivery, writes HEARTBEAT.md, and demands repeated background execution until criteria are met. Although registry flags show always:false, the instructions try to establish persistent, autonomous behavior and file modifications without declaring or requesting the proper privileges or configuration — this mismatch is concerning.
What to consider before installing
What to consider before installing: - The skill provided no code or install steps but expects a local script at C:\Users\sarum\.openclaw\workspace\youtube-research.js and a Node/browser environment. Ask the author for the actual script and installation instructions before running anything. - The instructions require writing files (youtube-research-YYYY-MM-DD.json, HEARTBEAT.md), repeatedly running background jobs, and sending data to Telegram weekly — but no Telegram token or other credentials are declared. Do not provide any secret tokens until you verify exactly how they are used. - The SKILL.md tells the main session not to read result files and to use a subagent instead — this is unusual and could be an attempt to bypass review or auditing. Ask why this design is necessary and request to inspect the output files and the script logic. - If you consider using it: get the source code, review the script for what it scrapes/sends, confirm it respects YouTube terms of service, and ensure any scheduled/unprompted actions are under your control (or remove them). - If you do not trust the author or cannot review the script, do not run it and prefer a skill that includes its code, declares necessary binaries/credentials, and does not require hidden background scheduling.

Like a lobster shell, security has layers — review code before you run it.

latestvk972hqm7fk8w3n9cgt4wgmf8e183v498

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments