Ai Product Description Writer
v2.0.1Generate product descriptions in 4 styles (professional, casual, luxury, SEO) from product name and features using Grok AI. Requires XAI_API_KEY. Use when wr...
⭐ 0· 31·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name and description match the included implementation: the script and SKILL.md call Grok (api.x.ai) to generate multi-style product descriptions. Requiring a Grok API key (XAI_API_KEY) is appropriate for this purpose. However, the registry metadata incorrectly lists "Required env vars: none" while the SKILL.md and script clearly require XAI_API_KEY; this metadata mismatch should be corrected.
Instruction Scope
Runtime instructions and the shell+Python script are narrowly scoped to: read the provided --product and --features arguments, read XAI_API_KEY from the environment, call api.x.ai, and print the responses. The script does not read other files, system credentials, or exfiltrate data to unexpected endpoints.
Install Mechanism
No install spec is present (instruction-only plus an included script). The script relies only on python3 and the standard library (urllib), which is proportionate and low-risk. Nothing is downloaded or extracted from untrusted URLs.
Credentials
The only credential required at runtime is XAI_API_KEY, which is appropriate for calling Grok. The concern is the inconsistency: registry metadata omitted this required env var, which could mislead users about what secrets are needed. As with any API key, users should avoid supplying high-privilege or organization-wide keys.
Persistence & Privilege
The skill does not request persistent or elevated presence (always is false). It does not modify other skills or system-wide settings. Autonomous invocation is allowed by default (normal for skills) and is not combined with other red flags here.
Assessment
This skill appears to do what it says: generate multi-style product copy via Grok. Before installing: (1) note that the registry metadata incorrectly omits the required XAI_API_KEY—the SKILL.md and script do require it, so expect to provide a Grok API key; (2) only provide a key with the minimum necessary permissions (prefer a dedicated/test key rather than an org-wide secret); (3) review and test locally or in a network-restricted sandbox first to confirm behavior; (4) avoid passing sensitive or PII in the product/features fields since they are sent to the Grok API; (5) if you need metadata fixed, ask the publisher to update the registry entry to list XAI_API_KEY so requirements are transparent.Like a lobster shell, security has layers — review code before you run it.
latestvk97az1gan3s0ma7trcaz2f0mfh8528sj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Environment variables
XAI_API_KEYrequired— Grok API key from console.x.ai