Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Vlog

v0.1.0

提供手机剪辑、卡点音效及旅游大片拍摄技巧。

0· 200·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for mike47512/vlog.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Vlog" (mike47512/vlog) from ClawHub.
Skill page: https://clawhub.ai/mike47512/vlog
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install vlog

ClawHub CLI

Package manager switcher

npx clawhub@latest install vlog
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
Name/description advertise phone editing, beat-sync sound effects and filming tips, but SKILL.md focuses on travel logistics (transport type, visas, real-time seat/flight availability, digital boarding passes, order itineraries). This is a clear mismatch: a vlog-editing feature would not normally need minute-level ticket inventory or digital boarding passes.
!
Instruction Scope
SKILL.md lists 'return fields' such as realtime ticket/flight dynamics, order itineraries and digital boarding passes and promises minute-level updates. It does not state how to obtain those (which APIs, what credentials) nor limit what data to read. The instructions are vague and scope-creeping relative to the stated purpose.
Install Mechanism
There is no install spec and no code files — the skill is instruction-only, so nothing will be written to disk during install.
!
Credentials
The runtime doc implies access to sensitive personal/travel data (order itineraries, digital boarding passes) and real-time inventory, but the package declares no required environment variables, credentials, or data sources. Either the skill is missing required credentials/APIs or it expects the agent to obtain sensitive data from elsewhere — both are problematic.
Persistence & Privilege
The skill does not request always:true and has no declared persistent privileges or modifications to other skills or system settings.
What to consider before installing
This skill is inconsistent: its name/description say 'vlog editing' but the instructions describe travel-ticketing and minute-level flight/inventory data (including digital boarding passes). Before installing, ask the publisher for clarification and documentation: what is the true purpose, which APIs and credentials does it need, and where will personal travel data come from? Do not provide boarding passes, order itineraries, or any travel account credentials until you have a clear, trusted data-source and privacy explanation. If the author cannot justify why a vlog tool needs real-time ticketing data, treat the skill as untrustworthy.

Like a lobster shell, security has layers — review code before you run it.

latestvk974rg8e2gj5y8vnqwa55wc3ed836gfp
200downloads
0stars
1versions
Updated 7h ago
v0.1.0
MIT-0

旅行Vlog

筛选项

  • 交通方式(高铁/飞机/自驾/公共交通)
  • 出行偏好(特惠/舒适/周边/长途)
  • 签证与政策(免签/落地签/核酸要求/预约预约)

返回字段

  • 实时余票/航班动态/延误信息
  • 目的地攻略/天气预警/当地消费参考
  • 订单行程单/值机助手/数字登机牌

示例请求

  • “如何快速使用 旅行Vlog 处理 [具体场景任务] ?”
  • “旅行Vlog 的 [核心功能] 有哪些最新玩法/优惠信息?”

更新频率

  • 随交通枢纽数据、气象信息及库存变动分钟级响应

注意事项

  • 高峰出行请提前购买延误险;遵守当地旅游文明公约与防疫要求。

Comments

Loading comments...