Colors CC

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: colors-cc Version: 0.3.1 The colors-cc skill is a legitimate utility for generating SVG placeholders and performing color conversions via the api.colors-cc.top domain. It contains no executable code, requests no sensitive data or permissions, and includes safety instructions for the agent to avoid unnecessary data fetching.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If sensitive project names or private text are placed into placeholder URLs, that information may be sent to the external service and cached.

Why it was flagged

The skill sends placeholder parameters, including user-chosen text, to a third-party API and documents long-lived public caching for generated SVG responses.

Skill content
Endpoint: `https://api.colors-cc.top/placeholder` ... `text`: Center text, URL-encoded ... Response: SVG image with `Cache-Control: public, max-age=31536000, immutable`
Recommendation

Use the service for non-sensitive mockup text and design data; avoid placing private or confidential information in URL parameters.

What this means

Mockups or assets generated with default settings may contain Colors CC branding or comments that the user did not intend to publish.

Why it was flagged

Generated assets include third-party branding and an HTML comment by default, though the behavior is disclosed and can be disabled.

Skill content
`attribution`: Include branding watermark (default: true). Set to `false` or `0` to disable. When enabled, adds a subtle "colors-cc.top" watermark ... and HTML comment for viral sharing.
Recommendation

Set `attribution=false` when generating assets that should not include external branding, and review generated markup before publishing.