ClawHub

Financial Advisor Video

v1.0.1

AI video creation for financial advisors, wealth management practices, independent financial planners, and registered investment advisors — generate retireme...

⭐ 0· 48·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name and long description describe a video-creation/marketing assistant for financial advisors; there are no required binaries, env vars, or install steps that would be inconsistent with that purpose.
ℹ
Instruction Scope
The visible SKILL.md is marketing- and prompt-style content and does not show runtime commands, network endpoints, or credential usage. Because the file was truncated, I could not confirm whether the runtime instructions ask for client PII, account credentials (e.g., YouTube/LinkedIn), or instruct uploading/transmitting recordings to third-party services — those would be scope concerns if present.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes disk-write and remote-install risk.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. That aligns with an instruction-only marketing/video prompt package.
✓
Persistence & Privilege
No always:true flag, no install actions and no modifications to other skills or system config are declared. The default allow-autonomous-invocation is not by itself a concern here.
Assessment
This skill appears internally consistent with its stated purpose, but the SKILL.md was truncated in the package you provided. Before installing or using it: (1) open the full SKILL.md and search for any runtime steps that request client personal data (SSNs, full financial account numbers, DOBs) — avoid providing live client PII to the skill unless you’ve verified data handling and compliance; (2) check for instructions that ask for API keys or tokens for video hosting platforms (YouTube, LinkedIn, cloud storage) — those would be expected only if you plan to publish automatically and should be optional; (3) test the skill in a sandbox account with dummy data first; and (4) if you will use real client data, confirm retention, sharing, and security practices to meet privacy and regulatory requirements (e.g., FINRA/SEC, data protection rules). If you paste the full SKILL.md I can re-evaluate instruction-level risks (e.g., prompts that exfiltrate data or call external endpoints).

Like a lobster shell, security has layers — review code before you run it.

latestvk97f79mtnbd8jfwj5psddz2cp984efrg

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments