Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
AI Event Viral Content Machine: Research, Produce and Distribute Viral Event Content Across Every Platform in 20 Minutes
v1.0.0Scrapes and analyzes real-time event content across 10 platforms, generating platform-optimized scripts and professional videos within 20 minutes for viral e...
⭐ 0· 53·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The SKILL.md describes scraping 10 platforms via Apify scrapers, producing videos via InVideo AI, and using Claude AI as an intelligence layer. Yet the skill declares no required environment variables, no primary credential, and no install steps. Real usage of Apify, InVideo, and Anthropic/Claude normally requires API keys and/or account access, and posting to social platforms requires posting credentials or integrations. The declared requirements do not match the described capabilities.
Instruction Scope
The runtime instructions (SKILL.md) instruct the agent to gather real‑time content across multiple platforms and produce/distribute content. Those actions imply network calls to third‑party services and possibly collection/processing of large amounts of user-generated content. The skill does not declare how credentials are provided, what exact endpoints are used, or whether it will collect any non-public or personally identifiable data. The instructions therefore grant broad discretion without specifying required auth, limits, or data handling constraints.
Install Mechanism
There is no install spec and no code files; the skill is instruction-only. That minimizes on‑disk code execution risk. However, the functionality relies entirely on external cloud services (Apify, InVideo, Claude), so the real risk surface is remote API access rather than a local install — and the skill does not describe that access.
Credentials
No environment variables or credentials are declared, yet the described workflow clearly requires API keys/tokens for Apify, InVideo, and likely Anthropic/Claude and social platforms for distribution. This is disproportionate: the skill should declare required secrets (and the minimal scopes) so a user can evaluate and provide least‑privilege credentials.
Persistence & Privilege
The skill is not force‑included (always:false) and is user‑invocable, which is appropriate. There is no indication it requests to modify other skills or system settings. No persistence or elevated platform privileges are requested in the metadata.
What to consider before installing
This skill’s description says it will scrape 10 platforms, score moments with Claude, and produce videos via InVideo, but it does not declare any API keys or posting credentials — a clear mismatch. Before installing or using this skill: (1) ask the author to publish a complete requirements list (APIFY_API_TOKEN, INVIDEO_API_KEY, CLAUDE/ANTHROPIC key, and any social platform tokens needed for posting) and the exact scopes those tokens require; (2) refuse to provide full account credentials — use least‑privilege tokens or dedicated service accounts and confirm token scopes; (3) verify how scraped data is stored, who can access it, and whether PII may be collected; (4) confirm compliance with each platform’s scraping and posting terms of service and with privacy laws that may apply to event attendees; (5) consider running the skill in a sandboxed/test account first; and (6) be aware of affiliate/referral links present in the SKILL.md, which may indicate monetization bias. If the author cannot explain how the skill authenticates and where data flows, do not grant it access to production credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk97az5vha6g1c2rvtf44vvfry583m57nlatest? event-marketing event-content apify invideo conference-content event-video live-event-marketing event-social-media event-tiktok event-coverage conference-marketing event-promotion live-coverage event-videography event-instagram speaker-content event-highlights event-branding conference-video event-strategyvk97az5vha6g1c2rvtf44vvfry583m57n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.