ClawHub

Mcn Toolkit Skill

v1.0.2

MCN Toolkit is an AI operations assistant for MCN agencies, influencer managers, and KOL teams handling creators at scale. It helps organize campaign assets,...

⭐ 0· 84·0 current·0 all-time
bywes@imwyvern
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description (MCN Toolkit for agencies and KOL management) match the content of SKILL.md. There are no requested env vars, binaries, or install steps that would be out of scope for a content-management assistant.
ℹ
Instruction Scope
SKILL.md is high-level, containing capabilities and example prompts rather than explicit runtime commands. That keeps scope narrow and readable, but the prose is broad (e.g., 'generate platform-ready videos', 'cross-platform analytics') and could give the agent wide discretion in how to fulfill tasks. There are no instructions to read local files, access system paths, or exfiltrate data.
✓
Install Mechanism
No install spec and no code files are present (instruction-only). This minimizes on-disk execution risk — nothing will be downloaded or installed by the skill itself.
✓
Credentials
The skill declares no required environment variables, no primary credential, and no config paths. This aligns with its stated purpose and does not request broad credentials or secrets.
✓
Persistence & Privilege
The skill is not flagged always:true and uses normal agent invocation defaults. It does not request permanent presence or attempt to modify other skills or system settings.
Assessment
This skill appears coherent and low-risk because it is instruction-only and requests no credentials or installs. However, the source/homepage is not authoritative in the package metadata (no homepage provided, and owner ID is opaque). Before installing: 1) verify the publisher (ask who maintains 'MediaClaw' and confirm the mediaclaw.ai/mediaclawbot.com links are legitimate), 2) do not provide any API keys, passwords, or private account tokens in conversation unless you confirm the integration and privacy policy, 3) test with non-sensitive sample data to understand what the skill does, and 4) if the skill later asks for external integrations (platform APIs or cloud storage), require explicit justification and only supply scoped credentials. If you need higher assurance, request a published homepage, contact info, or a vetted release/source for the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e68cppd6h0whnt0knnkvgg583xp72

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments