Gumroad Product Page Generator
v0.1.0Generates Gumroad product page content from a simple spec.
⭐ 0· 87·0 current·0 all-time
byRunByDaVinci@clawdiri-ai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
Name/description claim: generate Gumroad product page content from a spec — that is consistent with the README and SKILL.md examples. However, the README references Python scripts (scripts/generate-page.py) and a disclaimer templates file (data/disclaimer-templates.json) which are not included with the skill; the SKILL.md example also uses a CLI command (gumroad-page-gen) that is not provided. This mismatch means the declared capability is incomplete as packaged.
Instruction Scope
SKILL.md gives runtime usage examples that invoke a CLI or Python script and describe reading JSON files or stdin. The instructions do not request unrelated system files or credentials, but they do assume local binaries/scripts and a templates file exist. Because those artifacts are missing, an agent following these instructions could either fail or attempt to locate/install the missing tooling (not described), which is out-of-scope for the stated simple copy-generation task.
Install Mechanism
There is no install spec and no code files included. The README implies a Python-based implementation and a required data file, but neither is present. The lack of an install plan combined with references to missing scripts is an inconsistency: either the package should include the scripts or provide a safe, explicit install mechanism (e.g., pip package or GitHub release).
Credentials
The skill declares no required environment variables, no credentials, and no config paths. That is proportional to the stated purpose (copy generation) and consistent with the README statement that it does NOT upload to Gumroad and needs no external deps.
Persistence & Privilege
always is false and there are no install hooks or config writes described. The skill does not request persistent privileges or system-wide config changes.
What to consider before installing
This skill is instruction-only but is missing the actual implementation (the CLI or Python scripts and the disclaimer templates file) that README and SKILL.md refer to. Before installing or enabling it:
- Treat it as incomplete: the agent may fail or try to fetch/install missing code if it follows these instructions. Ask the publisher for the source code or a clear install method (e.g., a pip package or GitHub repo).
- Verify the missing files (scripts/generate-page.py and data/disclaimer-templates.json) come from a trusted source before allowing any automatic download or execution.
- If you provide product JSON to this skill, avoid including secrets or sensitive data (API keys, personal identifiers) — the package doesn't request credentials, but missing implementation could lead an agent to attempt network fetches to satisfy the instructions.
- If you want a safe alternative, use a vetted tool or provide your own script and templates locally, then have the agent run only that known code.Like a lobster shell, security has layers — review code before you run it.
latestvk9732kxt1cg035vbj0tj4a9m6583cjv7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
