Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Multimodal Asset Tagger
v1.0.0Generate AI-optimized Alt Text, file names, captions, and Schema markup for images, videos, and audio assets. Improves AI discoverability on Google Lens, Cha...
⭐ 0· 340·0 current·0 all-time
byGEOLY AI@geoly-geo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name and description (generate alt text, filenames, captions, and Schema markup for images, video, audio) align with the provided SKILL.md guidance. However, the only executable code (scripts/optimize_asset.py) only produces simple Alt Text and a filename for images; it does not produce Schema markup, discoverability scores, or explicit support for video/audio. This is an over-promise vs. actual capability.
Instruction Scope
SKILL.md instructs running the bundled Python script and contains methodology and templates. The runtime instructions do not request any secrets, system files, or network endpoints. They do, however, instruct generation of outputs (Schema, scores) that are not produced by the script, so following the SKILL.md may give a false expectation of behavior.
Install Mechanism
No install spec is provided (instruction-only). The included Python script is small, pure local code, and there are no external downloads, package installs, or archive extraction steps.
Credentials
The skill requests no environment variables, no credentials, and references no config paths. The code does not access environment variables or external services, so requested privileges are minimal and proportionate.
Persistence & Privilege
The skill is not always-enabled and does not request persistent presence or modify agent/system configuration. It runs a local script when invoked and does not store credentials or alter other skills.
Assessment
This skill appears harmless and consistent with generating simple alt text/filenames, but the documentation over-promises features the code doesn't implement (schema markup, scoring, video/audio support). Before installing: (1) verify the source or owner if you require provenance; (2) review and run the small Python script in a sandbox/local environment—it only prints an alt text and a filename; (3) if you need Schema markup, scoring, or video/audio handling, plan to extend the code or use a different tool; (4) avoid supplying secrets or connecting it to production systems until you expand and test its functionality.Like a lobster shell, security has layers — review code before you run it.
alt-textvk97dzvrhd010xnetbzs095hc19820zr1geovk97dzvrhd010xnetbzs095hc19820zr1imagesvk97dzvrhd010xnetbzs095hc19820zr1latestvk97dzvrhd010xnetbzs095hc19820zr1multimodalvk97dzvrhd010xnetbzs095hc19820zr1schemavk97dzvrhd010xnetbzs095hc19820zr1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.