Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Ad Video Creator Skill
v1.0.2Ad Video Creator is an AI ad creative tool for teams making advertisement videos that need stronger hooks, clearer offers, and faster testing cycles. It help...
⭐ 1· 126·0 current·0 all-time
bywes@imwyvern
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The README and SKILL.md claim full AI video-generation, format conversion, and platform compliance, yet there are no code files, no install steps, no declared APIs or credentials, and no required binaries — it's unclear how the agent is expected to actually produce videos. This mismatch between claimed capabilities and what the skill requests/installs is a coherence problem.
Instruction Scope
The SKILL.md is high-level and open-ended: it tells the agent what outcomes to produce but does not specify which services, endpoints, or local tools to use, nor does it limit how to gather or transmit assets. Vague instructions grant the agent broad discretion (e.g., to call external APIs or upload user assets) without constraints or privacy/retention guidance.
Install Mechanism
There is no install spec and no code to write to disk. That lowers supply-chain risk, but also means functionality depends on external services or the agent's own capabilities — which are not specified.
Credentials
The skill declares no required environment variables, credentials, or config paths. While that avoids immediate overreach, it also deepens the ambiguity about how the skill will perform the described work (it should normally require API keys or tooling).
Persistence & Privilege
The skill does not request always-on presence and contains no install behavior. It does not ask to modify other skills or system settings.
What to consider before installing
This skill promises full AI video creation but gives no implementation details — before installing or using it, ask the publisher for: (1) where video generation actually runs (which service or tool), (2) what API endpoints and credentials are required, (3) how uploaded assets are stored, transmitted, and retained, (4) privacy and billing implications, and (5) the source code or an audited integration. Until those are provided, avoid uploading real product assets or sensitive information; test with dummy data only. The lack of declared dependencies reduces install risk but increases ambiguity about what the agent might do (e.g., call unknown external services), so proceed cautiously.Like a lobster shell, security has layers — review code before you run it.
latestvk972v9p0yej1r8ajrb2p5j5g5x83xft5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.