ClawHub

Ad Copy Writer

v0.1.0

Create, generate, convert, and polish ad copy, marketing copy, product copy, landing page copy, headline variants, CTA variants, and promotional messaging th...

⭐ 0· 82·0 current·0 all-time
byWeiwei Fan@fwwdn
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the implementation: scripts call a WeryAI chat completions endpoint to produce ad/marketing copy. Declared requirements (node, WERYAI_API_KEY) are appropriate and proportional to the stated purpose.
ℹ
Instruction Scope
SKILL.md confines runtime behavior to collecting copy parameters and invoking local node scripts that call the WeryAI API. It does not instruct reading unrelated system files. Note: the code honors optional env vars (WERYAI_BASE_URL, WERYAI_REQUEST_TIMEOUT_MS) that are not listed in requires.env — these are configuration knobs that can change the network target/timeout.
✓
Install Mechanism
No install spec; scripts are bundled and executed with the host Node.js runtime. No external downloads or installers are requested by the package itself.
✓
Credentials
Only a single primary credential (WERYAI_API_KEY) is required, which matches the use of a third‑party text generation API. Minor optional env vars (base URL, timeout) are present but not required; they are reasonable for configuring the client.
✓
Persistence & Privilege
always is false and the skill does not request permanent agent-level privileges or modify other skills. It runs as an on-demand Node script and does not persist extra system configuration.
Scan Findings in Context
[system-prompt-override] unexpected: Scanner flagged a possible system-prompt override pattern in SKILL.md (e.g., directives like 'Do not explain your reasoning'). In context these are normal instructions for copy output shape rather than an attempt to subvert agent controls, but the flag is worth noting because the skill's instructions include explicit conversational behavior directives.
Assessment
This skill runs local Node scripts that send your input and the WERYAI_API_KEY to a WeryAI chat completions endpoint (default https://api.weryai.com). Before installing, confirm you trust WeryAI and that the API key you provide has the intended scope and billing account. If you want to inspect what will be sent, use the documented --dry-run mode to preview the request body without making network calls. Be aware you (or an autonomous agent using this skill) will transmit copy briefs and any sourceText to the external API. Also note optional env vars (WERYAI_BASE_URL) can redirect requests — only set that if you intend to target a non-default endpoint. The pre-scan prompt-injection flag points to strong output directives in SKILL.md (which are likely benign here), but you should avoid giving the skill secrets or unrelated credentials, and only provide the WERYAI_API_KEY if you accept that data will be sent to the external service.

Like a lobster shell, security has layers — review code before you run it.

latestvk97840cn24tc6qrnapzw1mtpws83bs6q

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎯 Clawdis
Binsnode
EnvWERYAI_API_KEY
Primary envWERYAI_API_KEY

Comments