CN Creator Pack 中文创作者全家桶
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This is an instruction-only Chinese creator skill bundle that contains five coherent sub-skills, requests no credentials or files, and has a small security surface — but installing it requires running an external installer (npx) and users should avoid pasting sensitive personal or proprietary data into prompts.
This bundle appears to be what it says: a set of instruction-only Chinese content/creator helpers with no embedded code or credential requests. Before installing, confirm you trust 'clawhub' (the npx installer) because the recommended install commands will execute remote code from npm. Do not paste highly sensitive personal or proprietary information (full ID numbers, banking credentials, private business data) into prompts — treat pasted resumes, job descriptions, financial positions, or product secrets as data you are consciously sharing with the model. If you need live market data or integration with third‑party platforms, verify how the sub-skill obtains that data (it currently does not declare API keys), and prefer installing only the specific sub-skill you need rather than the whole bundle.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
No VirusTotal findings