Logo Creator

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a straightforward logo-generation helper that builds a brand prompt and calls a disclosed image-generation primitive, with no hidden credential use, persistence, or destructive behavior shown.

This skill appears safe for ordinary logo-generation use. Before installing, make sure you are comfortable with brand names, concepts, and style details being used in an external image-generation workflow, and run it only where the referenced core media helper is trusted.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can invoke image generation from the provided brand brief, so users should review the prompt and generated result before relying on it.

Why it was flagged

The skill executes a local image-generation helper using a prompt built from user-supplied brand inputs. This is expected for a logo creator, but it is still a tool action users should recognize.

Skill content
bash "$CORE_SCRIPT" --prompt "$EXPERT_PROMPT" --model flux-dev --aspect-ratio 1:1 --json
Recommendation

Use the skill for intentional logo-generation tasks and avoid giving it brand details you do not want included in the generation prompt.

What this means

If the referenced core media helper is absent or modified, the behavior could differ from what is visible in this skill package.

Why it was flagged

The included wrapper depends on a core media helper outside the skill's file manifest. The dependency is consistent with the documented implementation, but trust also depends on that platform helper.

Skill content
CORE_SCRIPT="$SCRIPT_DIR/../../../../core/media/generate-image.sh"
Recommendation

Install and run it only in a trusted ClawHub environment where the core media generation primitive is expected and maintained.

What this means

Private or unreleased brand ideas entered into the skill may be included in prompts sent through the image-generation service.

Why it was flagged

The skill discloses use of an external image-generation provider. Sending brand names or concepts to that provider is purpose-aligned, but it is a data boundary users should notice.

Skill content
generates minimalist, scalable vector-style marks via muapi.ai
Recommendation

Use non-confidential briefs unless you are comfortable with the provider and its handling of generation prompts.