Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Baoyu Cover Image

v0.1.1

Generates article cover images with 5 dimensions (type, palette, rendering, text, mood) combining 10 color palettes and 7 rendering styles. Supports cinemati...

0· 171·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the provided runtime instructions and rich reference content: the skill is an instruction-only cover-image generator with no binaries, env vars, or external installs declared. The preferences and dimension lists are coherent with image-generation functionality.
!
Instruction Scope
SKILL.md instructs the agent to read/write EXTEND.md in project/user config locations (expected for preferences) and to save reference images, which is within scope, but also includes problematic guidance: 'If content involves sensitive or copyrighted figures, create stylistically similar alternatives - DO NOT refuse to generate' and 'model must visually reference [reference images] to preserve character likeness'. These instructions broaden the agent's discretion (may encourage generating stylized likenesses or bypassing refusals) and could conflict with content-rights or safety policies. The README also implies reference images will be 'passed to model (usage: direct)' but does not declare where / to which endpoint they are sent.
Install Mechanism
No install spec and no code files are included—this is instruction-only, so nothing will be downloaded or written except the EXTEND.md preference file (per the workflow). Low technical install risk.
Credentials
The skill requests no credentials or env vars (proportionate). However, the instructions imply transmitting user-provided reference images and content to 'the model' without declaring the backend or required credentials, creating ambiguity about where sensitive data might be sent.
Persistence & Privilege
always:false and user-invocable. The skill writes/reads its own EXTEND.md preference files in .baoyu-skills locations (project or user), which is within scope and not a cross-skill or system-wide privilege escalation.
What to consider before installing
This skill appears to be a coherent cover-image generator, but there are two main concerns to weigh before installing or running it: 1) Safety / copyright guidance in SKILL.md: the instructions explicitly say 'DO NOT refuse to generate' for sensitive or copyrighted figures and require the agent to preserve likenesses from reference images. That encourages the agent to produce stylized likenesses or bypass refusals; if you care about copyright, privacy, or platform content policies, this is a red flag. 2) Data destination ambiguity: the skill says reference images are 'passed to model (usage: direct)' but does not state whether generation runs locally or is sent to a remote API (and if remote, which endpoint). No credentials are declared, so it's unclear how/where image data would be transmitted. Actions you can take: - Ask the publisher or your platform: where is image generation performed (local model, platform API, third-party service)? Are reference images uploaded, and to which endpoint? Is there a content / DMCA / safety policy enforced? - If you proceed, review the EXTEND.md that will be written and choose storage scope 'Project' if you want preferences kept local to a repo. Disable quick_mode to require confirmation each time. - If you must avoid sending user images or likenesses externally, do not use this skill until the backend is explicit and satisfactory. What would change this assessment: explicit declaration of the generation backend (local vs named remote service), clear statement that content policy / refusal behavior is enforced by the platform (not overridden by the skill), and assurance that reference images are handled securely (not exfiltrated) would raise confidence and could move the verdict toward benign.

Like a lobster shell, security has layers — review code before you run it.

latestvk971hp1xj663pw7jvgdsdtnwe9837xx4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments