Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

podcast-highlights-deck

v1.0.0

Create a highly visual, editorial long-scroll HTML microsite from a podcast episode. Use when the user gives a podcast link (Apple Podcasts/Spotify/RSS/direc...

0· 66·0 current·0 all-time
byAnygen Selected Skill@ken-chy129
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's purpose (create a static highlight site with per-clip audio) matches the included template and clipping script. However, the SKILL.md expects tools like ffmpeg, yt-dlp, Python, and speech-to-text tooling (anygen-speech-to-text or OpenAI Whisper). The registry metadata lists no required binaries or environment variables, so the manifest does not declare the real runtime needs — an incoherence.
!
Instruction Scope
Runtime instructions direct the agent to search the web, fetch RSS/episode audio, download audio (yt-dlp fallback), transcribe audio via third‑party speech-to-text tools, split audio, clip segments, translate text, and build a site. Those steps involve network downloads, writing audio and JSON to disk, and calling external services/APIs — all expected for the task but not explicitly scoped in the skill metadata (e.g., where/with what credentials to call 'anygen-speech-to-text' or 'whisper-1' is unspecified).
Install Mechanism
No install spec (instruction-only) — lower risk for hidden installers. The skill does include code files (Python script and a TypeScript template) which will be copied into a project. The Python script invokes ffmpeg via subprocess; the skill relies on external binaries but doesn't provide or declare them.
!
Credentials
The SKILL.md references use of external speech-to-text services (anygen-speech-to-text and OpenAI Whisper) which normally require API keys, but requires.env/primary credential fields are empty. The skill therefore implicitly expects credentials or platform-provided tools but doesn't declare them—this mismatch is a red flag because it obscures what secrets the agent will need to access.
Persistence & Privilege
The skill is user-invocable and not always-enabled. It does not request permanent presence or modify other skills/config. It writes files into a working/project directory (normal for a site generator) but does not request elevated agent/system privileges in the manifest.
What to consider before installing
What to check before installing: - Expect to provide or ensure availability of binaries: ffmpeg (used by the script), Python (to run scripts), and optionally yt-dlp (for YouTube audio). The manifest does not declare these — verify you have them and are comfortable the agent will call them. - Transcription: the workflow names 'anygen-speech-to-text' and OpenAI 'whisper-1' — both typically need API keys and send audio to external services. Decide whether you want to upload podcast audio (which may contain private or copyrighted content) to those services and ensure you provide keys securely if needed. - The skill will download audio and web pages (RSS, podcast pages, YouTube). Confirm you are allowed to download and reuse the source audio (copyright/legal considerations). - Template loads Google Fonts and uses import.meta.glob for local audio imports; generated site will reference external font hosts and include created mp3 files in the site assets. If you need fully offline builds or to avoid external third-party hosts, edit the template. - The clip script (scripts/clip_audio.py) runs ffmpeg via subprocess to write mp3 clips and updates highlights.json — review it (it is short and straightforward) and run it in a controlled workspace. - Because the skill doesn't declare required env vars or credentials, ask the publisher (or inspect SKILL.md/README) how transcription and translation are expected to be authenticated in your environment. If a platform injects model access automatically, verify their privacy and billing behavior. Summary recommendation: the skill appears to do what it claims, but the missing declarations about required system tools and API credentials are an important inconsistency. If you plan to use it, verify the presence of ffmpeg/python/yt-dlp and clarify how you will provide transcription/translation API keys and accept related privacy/licensing implications.

Like a lobster shell, security has layers — review code before you run it.

latestvk973tk5w7tyncn9svxyvg514r583h8aq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments