Video Publish All

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is an instruction-only video publishing guide with no code or credentials, but users should confirm before letting an agent post publicly across platforms.

Install only if you want an agent to help with public video publishing. Before any post goes live, review the selected platforms, account, video file, title, description, tags, and any local publish-record path.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If acted on directly, the agent could publish user-provided videos, titles, and descriptions to public platform accounts.

Why it was flagged

The skill is explicitly about causing public video posts on multiple third-party platforms. This matches the stated purpose, but final posting can affect public accounts and should not happen without user confirmation.

Skill content
一键发布视频到国内主流视频平台,包含小红书、抖音、B站(哔哩哔哩)、腾讯视频号四大平台。
Recommendation

Confirm the exact platform list, title, description, tags, and account before any final publish action.

What this means

A wrong video, title, or description could be distributed across multiple public channels instead of only one.

Why it was flagged

The all-platform workflow can propagate the same mistake, draft, or policy issue across several public platforms at once. This is purpose-aligned, but it increases the impact of errors.

Skill content
帮我把视频发布到所有平台
Recommendation

Use a preview-and-confirm step, and consider testing on one platform before publishing everywhere.

What this means

Publication history or local video paths may be read or reused by the agent if that file exists.

Why it was flagged

The skill points to a persistent local publish-record file. That is consistent with avoiding duplicate posts, but the file may contain publishing history or video path information.

Skill content
发布记录:`/home/johnny/.openclaw/workspace/pjm/published.json`
Recommendation

Verify the path, contents, and permissions of the publish record, and avoid storing sensitive unpublished campaign information there.