Promify Creative Generator
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's requirements and runtime instructions are generally consistent with its stated purpose (calling the Promify API to generate ad creatives), with only minor metadata/instruction mismatches to be aware of.
This skill appears to do what it says: it needs your Promify API key and will fetch a product page and send extracted product data to promify.ai to generate creatives. Before installing or running it, be aware of three things: (1) you will need to add PROMIFY_API_KEY to your OpenClaw config (~/.openclaw/openclaw.json) — the registry metadata omits this, so follow the SKILL.md instructions; (2) the agent will automatically extract product info from a product URL and proceed to call the Promify API without asking for a separate confirmation — if you prefer to review inputs first, do not provide a product URL or ask the agent to pause before generation; (3) the skill sends product data (name, description, price, image URL) to promify.ai — ensure you trust Promify and avoid sending sensitive or private content. If you want higher assurance, request the skill author to fix the metadata mismatch (declare PROMIFY_API_KEY as a required env var) and to make the post-extraction confirmation explicit.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.