Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AI Logo Generator

v1.0.0

Generate professional logos from text prompts using artificial intelligence.

0· 131·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for krishnakumarmahadevan-cmd/ai-logo-generator.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "AI Logo Generator" (krishnakumarmahadevan-cmd/ai-logo-generator) from ClawHub.
Skill page: https://clawhub.ai/krishnakumarmahadevan-cmd/ai-logo-generator
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ai-logo-generator

ClawHub CLI

Package manager switcher

npx clawhub@latest install ai-logo-generator
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description match the provided OpenAPI (POST /generate-logo) and the skill is instruction-only, which is consistent for an API wrapper. However, the skill's source/homepage are missing and the docs reference external domains (api.mkkpro.com and toolweb.in) without clarifying ownership, authentication, or required API keys — this gap is unexplained and worth caution.
Instruction Scope
SKILL.md provides an endpoint, sample request/response, and usage details; it does not instruct the agent to read local files, environment variables, or other system state. That is appropriate. However, the instructions implicitly require sending user prompts (which may contain sensitive data) to an external service; there is no explanation of authentication, request headers, or privacy/retention—so the scope regarding data exfiltration and privacy is underspecified.
Install Mechanism
No install spec and no code files — instruction-only. This minimizes disk-write/execute risk. There are no downloaded archives or third-party packages declared.
Credentials
The skill declares no required environment variables or credentials, which could be fine for a public/free endpoint. But the referenced API provider pages suggest a hosted service that may require API keys or billing; the absence of any declared credential requirement is ambiguous and could indicate missing metadata or hidden auth steps.
Persistence & Privilege
always is false and there are no indications the skill requests persistent system privileges or modifies other skills. Autonomous invocation is allowed (platform default) but not combined with other high-risk indicators here.
Scan Findings in Context
[no-findings] expected: The repo contained only SKILL.md and openapi.json (instruction-only); the regex scanner had nothing to analyze. This is expected for an instruction-only skill, but it means there is no code to audit for hidden behavior.
What to consider before installing
This skill appears to be a thin API wrapper that sends your text prompts to an external service (api.mkkpro.com / toolweb.in). Before installing or using it: 1) Confirm the provider's identity and reputation (unknown owner/homepage is a red flag). 2) Don't send sensitive or proprietary text in prompts until you verify privacy, retention, and terms (there's no statement about data handling). 3) Expect that an API key or billing may be required even though none are declared — ask the publisher how authentication is handled. 4) Test first with non-sensitive sample prompts and monitor network calls. 5) If you need guarantees about confidentiality, prefer a well-known vendor or an on-prem/self-hosted alternative. If you can get the publisher's contact, documentation, or a verified homepage, reassess with that information.

Like a lobster shell, security has layers — review code before you run it.

latestvk9712d277wncd1ev4gy82ce7gn839seg
131downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Overview

AI Logo Generator is a powerful API that transforms creative text descriptions into unique, professional logos using advanced AI models. Whether you're a startup founder, designer, or brand manager, this tool eliminates the need for expensive design agencies by delivering high-quality logo designs instantly.

The API accepts natural language prompts describing your desired logo and returns AI-generated logo images tailored to your specifications. With support for diverse design styles, color schemes, and industry verticals, it's ideal for rapid prototyping, brand exploration, and design inspiration.

Perfect for entrepreneurs, marketing teams, design agencies, SaaS platforms, and anyone needing quick, cost-effective logo generation without manual design work.

Usage

Sample Request

{
  "prompt": "A modern, minimalist tech startup logo featuring a blue geometric cube with white accents, suitable for a cloud computing company"
}

Sample Response

{
  "success": true,
  "logo_url": "https://cdn.example.com/logos/ai-generated-12345.png",
  "prompt": "A modern, minimalist tech startup logo featuring a blue geometric cube with white accents, suitable for a cloud computing company",
  "format": "png",
  "size": "512x512",
  "generation_time_ms": 3420,
  "model_version": "v1.2"
}

Endpoints

POST /generate-logo

Generates a professional logo based on a text description.

Method: POST

Path: /generate-logo

Description: Accepts a text prompt describing the desired logo and returns an AI-generated logo image.

Request Parameters:

ParameterTypeRequiredDescription
promptstringYesNatural language description of the desired logo design, including style, colors, industry, and any specific elements or symbols

Response Schema:

FieldTypeDescription
successbooleanIndicates whether the logo generation was successful
logo_urlstringDirect URL to the generated logo image
promptstringThe original prompt used for generation
formatstringImage format of the generated logo (e.g., "png")
sizestringDimensions of the generated logo (e.g., "512x512")
generation_time_msintegerTime in milliseconds required to generate the logo
model_versionstringVersion of the AI model used for generation

Status Codes:

  • 200 OK — Logo generated successfully
  • 422 Unprocessable Entity — Validation error (missing or invalid prompt parameter)

Pricing

PlanCalls/DayCalls/MonthPrice
Free550Free
Developer20500$39/mo
Professional2005,000$99/mo
Enterprise100,0001,000,000$299/mo

About

ToolWeb.in — 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.

References

  • Kong Route: https://api.mkkpro.com/creative/ai-logo-generator
  • API Docs: https://api.mkkpro.com:8003/docs

Comments

Loading comments...