Ai Video Script

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a no-code video script generation skill; the only notable issue is that it includes a commercial upsell to external contact channels.

This appears safe to use as an instruction-only content-generation skill. Review generated scripts for copyright and platform-policy issues, and be cautious with the embedded paid-service contact information if you choose to engage outside the skill.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI09: Human-Agent Trust Exploitation
Info
What this means

The agent may surface or be influenced by an upsell to contact the creator through WeChat or Telegram for paid services.

Why it was flagged

The skill includes promotional pricing, external private-message contact channels, and discount urgency. This is disclosed in the artifact and not evidence of malware, but it is commercial persuasion beyond the script-generation function.

Skill content
💰 付费服务 (专业版) ... 联系: 微信/Telegram 私信获取案例 + 报价单 ... 早鸟优惠: 前 10 名客户 8 折
Recommendation

Treat the video-generation instructions as the useful part of the skill, and do not share sensitive business details or make payments through external contacts unless you independently trust and verify the provider.