Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Sprinkler System Installation Video
v1.0.0AI video creation for sprinkler system installations, wealth management practices, independent financial planners, and registered investment advisors — gener...
⭐ 0· 44·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill name, slug, and some keywords reference 'sprinkler system installation', but the full description and primary scenario are clearly about creating marketing videos for financial planners/advisors. This mismatch between title/keywords and actual purpose is incoherent and could cause misclassification, incorrect outputs, or indicate a copy/paste/template error.
Instruction Scope
This is an instruction-only skill (no code, no installs, no required env vars). The SKILL.md appears to be long marketing/content-generation guidance; it does not request credentials or system access. However, the instructions include unrelated/contradictory tokens (sprinkler system) embedded in financial content, and are broad/vague — granting the agent wide discretion to compose marketing material which could produce incorrect or misleading outputs if the ambiguity persists.
Install Mechanism
No install spec and no code files — lowest-risk delivery method. Nothing is written to disk by an installer.
Credentials
The skill declares no environment variables, credentials, or config paths. There is no apparent request for secrets or unrelated service access.
Persistence & Privilege
always:false and normal invocation settings. The skill does not request persistent/system-wide privileges.
What to consider before installing
Do not install blindly. This skill appears mislabelled (title/keywords about 'sprinkler system' but content about financial-advisor videos). Before using/installing: (1) Ask the publisher to confirm the intended purpose and correct the name/keywords; (2) Inspect the full SKILL.md for any hidden instructions that call external APIs, require credentials, or reference system files; (3) If you plan to run it, test in a limited/sandbox agent so the agent's outputs don't publish incorrect material; (4) If you need a sprinkler-installation video tool, or a financial-marketing video tool, get a skill whose name/metadata match its function. Additional concerning signals would be any env vars, install steps that download code, or instructions that exfiltrate data — if those appear, treat the skill as higher risk.Like a lobster shell, security has layers — review code before you run it.
latestvk97cf29vqq1dtztvm36sqhq0dn84epyn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.