ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Slide Generator

v3.0.0

Use this skill any time the user wants to create, design, or produce slide presentations — as standalone files or embedded content. This includes: pitch deck...

⭐ 10· 1.1k·5 current·5 all-time
byAnyGenIO@logictortoise
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the declared dependencies: the skill needs the AnyGen CLI and an ANYGEN_API_KEY to generate slides. The Node package @anygen/cli and the anygen binary are appropriate for this purpose.
✓
Instruction Scope
SKILL.md only instructs use of the anygen CLI (auth flows, env var usage, and invoking a workflow). It does not ask the agent to read unrelated files, access unrelated environment variables, or send data to unexpected endpoints beyond AnyGen's service.
ℹ
Install Mechanism
Install uses an npm-scoped package (@anygen/cli) which will create the anygen binary. This is a standard moderate-risk mechanism (package code will run locally); users should confirm the npm package and publisher are legitimate before installing.
✓
Credentials
Only ONE credential is required (ANYGEN_API_KEY) and it is explicitly declared as the primary credential. That matches the need to authenticate to AnyGen.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. The install will place a user-level CLI binary (anygen), which is normal for a CLI-based integration.
Assessment
This skill appears to do what it says: it calls the AnyGen CLI to produce slide decks and requires an AnyGen API key. Before installing: verify the @anygen/cli npm package and publisher are legitimate; treat ANYGEN_API_KEY like any sensitive API key (use least-privilege keys, rotate them, do not share); be aware the anygen binary will run locally and may access files or network when generating slides; the skill may prompt the user to complete a browser-based OAuth flow. If you do not trust the AnyGen service or the npm package owner, do not install or provide your API key.

Like a lobster shell, security has layers — review code before you run it.

latestvk9766p49bbtbmq4v77b69p90sh83xwew

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsanygen
EnvANYGEN_API_KEY
Primary envANYGEN_API_KEY

Install

Node
Bins: anygen
npm i -g @anygen/cli

Comments