Digital IP Agent
v1.0.0Turn a public creator, blogger, podcaster, YouTuber, or X/Twitter personality into a deployable OpenClaw agent. Use when the user provides a YouTube URL, X h...
⭐ 0· 67·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name, description, and runtime instructions align: the skill collects public creator material, extracts voice/values, and emits persona files. Minor note: the SKILL.md expects the agent to fetch transcripts/posts but doesn't specify how (web scraping, platform APIs, or helper skills). That omission is plausible for an instruction-only skill but means downstream connectors (browser, search-pro, API keys) will determine actual network access.
Instruction Scope
Instructions focus on gathering public material and producing persona files; they do not tell the agent to read local config, secrets, or unrelated system files. The guidance to 'search for more material' and to 'pull transcripts/description/recent posts/replies' is consistent with the stated goal. The SKILL.md calls out not to fabricate when evidence is thin, which reduces risky open-ended behavior.
Install Mechanism
There is no install spec and no code files — lowest-risk form. Nothing will be written to disk by an installer as part of this skill itself.
Credentials
The skill declares no required environment variables, credentials, or config paths. Recommended supporting skills in references/skills-catalog.md may themselves require credentials (e.g., APIs or browser automation) but those are not requested by this skill and are optional recommendations.
Persistence & Privilege
always:false and default model-invocation settings are used. The skill does not request permanent system presence or modify other skills' configs. Autonomous invocation is allowed by platform default but is not combined here with elevated privileges or credential requests.
Assessment
This skill appears coherent and instruction-only, but consider these practical and safety points before using it: (1) Data sourcing: the skill expects the agent to fetch public content (videos, posts, transcripts). Confirm which connector will be used (web scraping, YouTube/X APIs, or a search skill) and whether you have rights or API keys for that. (2) Copyright and impersonation risk: turning a creator's public voice into a deployable agent can raise IP, trademark, and impersonation issues — get consent or legal clearance before publishing an agent that mimics a real person. (3) Supporting skills: the bundled references recommend tools (browser automation, code execution) that can increase risk; only enable trusted supporting skills and review their permissions. (4) Review outputs manually: inspect soul.md/identity.md/memory.md/agents.md for accidental inclusion of copyrighted text, private data, or instructions that could exfiltrate data before deploying. (5) If you want stricter control, limit autonomous invocation for agents that could contact external services or act on behalf of others. If you need more assurance, provide the auditor with the agent connectors you plan to use (e.g., browser plugin, search-pro skill) so their access patterns can be reviewed.Like a lobster shell, security has layers — review code before you run it.
latestvk9748etwhrjgtz4rnjs68qctw183he5q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.