v1.1.2

Grok Imagine Prompts

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:18 AM.

Analysis

This skill appears to do what it claims: search a disclosed YouMind prompt API without requesting credentials or local file access.

GuidanceThis looks safe for normal prompt discovery. Be aware that searches are sent to YouMind's API, so do not include sensitive personal, business, or confidential details in search terms.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

scripts/search.mjs

await fetch('https://youmind.com/youhome-api/video-prompts', { method: 'POST', ... body: JSON.stringify({ model, page, limit, q: q || undefined }) })

The helper sends the user's search query and pagination parameters to YouMind's live prompt API. This is disclosed and central to the skill's purpose, but it means searches are not purely local.

User impactYour prompt search terms may be sent to YouMind.com when the skill is used.

RecommendationAvoid putting private or sensitive information into search queries unless you are comfortable sharing it with the API provider.