ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Short Play Writer（短剧剧本创作大师）

v1.0.0

专业短剧/AI漫剧剧本创作助手，支持男频/女频爆款短剧、AI漫剧剧本撰写，包含最新行业成功要素、标准结构模板、爆款爽点设计和漫剧专属分镜规范。

⭐ 0· 131·0 current·0 all-time
by@kenz1117
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
ℹ
Purpose & Capability
The skill is an instruction-driven writer with many templates and references — that matches the stated purpose. However _meta.json declares a 'requires.bins' entry for python3 while SKILL.md and requirements.txt claim 'no dependencies' (pure prompt-driven). Requiring python3 is unnecessary for an instruction-only skill and is an inconsistent metadata entry worth verifying.
ℹ
Instruction Scope
SKILL.md and all included files are prompt/templates for writing short dramas and AI comic storyboards and do not instruct the agent to read system files, call external endpoints, or access credentials. One coherence issue: the documentation's 'avoid policy' guidance (
ℹ
Install Mechanism
There is no install spec and no code files — lowest technical risk. Still, _meta.json's 'requires.bins' listing python3 is inconsistent with the rest of the package (requirements.txt says no deps). Because there is no install or download step, there's no external code-fetch risk.
✓
Credentials
The package requests no environment variables, no credentials, and no config paths. That is proportionate for a writing/template skill.
✓
Persistence & Privilege
Flags show always:false and default model invocation enabled (normal). The skill does not request persistent system privileges or modify other skills; there's no evidence of system persistence.
What to consider before installing
This skill is instruction-only and technically low-risk (no env vars, no installs, no network endpoints). Before installing or enabling it: 1) Confirm the metadata mismatch: _meta.json lists python3 but SKILL.md/requirements.txt say no dependencies — ask the author or remove the spurious requirement. 2) Review triggers/autotriggering: the skill is configured to auto-trigger on many short-drama keywords — ensure you want the agent to activate automatically for those phrases. 3) Check content & moderation risk: many examples contain graphic violence and other sensational hooks that may violate platform/content policies or be undesirable; consider sanitizing examples and templates to comply with policy and your standards. 4) Because there are no credentials or external installs, the main risks are content moderation and accidental automatic activation — test the skill in a sandboxed environment and review sample outputs before enabling it for general use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ds9dr7x03bvss2dsbcehv49832m4d

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments