Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Dressup Playable Maker

Create dress-up style playable ads for mobile advertising platforms like Mintegral. Use when the user needs to create or customize a fashion dress-up interac...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 222 · 3 current installs · 3 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (playable dress-up ads) align with included files: a template HTML, an MRAID stub, and a Python generator that copies assets and injects simple config. The files and CLI options are proportionate to the stated purpose.
Instruction Scope
SKILL.md instructs running scripts/generate.py with input and output dirs and editing generated CSS/HTML. The generator operates on local files inside the skill and the user-supplied asset directory; it does not read unrelated system config or environment variables nor send data externally. The index.html includes a CTA that opens a Play Store URL (expected for an ad template).
Install Mechanism
No install spec — instruction-only with bundled template and a small Python script. Nothing is downloaded from external URLs and no archives are extracted. This is low-risk for install mechanism.
Credentials
No required environment variables, no credentials, and no config paths are requested. The skill writes output to the user-provided output directory only. This is proportionate to a local asset-generation tool.
Persistence & Privilege
Skill is not always-enabled and does not attempt to modify other skills or system-wide settings. It only writes generated files into the specified output directory and copies its own mraid.js into that output.
Scan Findings in Context
[base64-block] expected: A large base64 data URI is embedded in assets/template/index.html (an inline background image). This is plausible for a self-contained template. Base64 blobs can conceal non-image payloads in other contexts, so it's worth visually confirming this is image data (and not an encoded script or hidden endpoint).
Assessment
This skill appears to do what it claims: it generates a playable ad package from local image assets using the included Python script and template. Before installing/using it: 1) Inspect the template (assets/template/index.html) to confirm the embedded base64 blob is just image data and to review the CTA URL (it currently opens a Play Store link). 2) Test the generator on a disposable folder to verify output files are as expected. 3) If you will upload generated packages to an ad platform, verify no unexpected analytics/tracking code was added to index.html or mraid.js. 4) Because the template is modified by regex replacements, ensure your template variables match the generator's expectations (or edit the script) so assets are injected correctly. Overall there are no requested credentials or network installers, but always review any third-party asset content before publishing.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk978kytnxzaaqqvq2ejf21pvs9826jx3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Dressup Playable Maker

Create interactive dress-up playable ads for mobile advertising platforms.

Quick Start

Generate a new playable from template:

python3 scripts/generate.py --input-dir /path/to/assets --output-dir /path/to/output

Required Assets Structure

Input folder should contain:

assets/
├── character/
│   ├── body.png          # Base character body
│   ├── hair/
│   │   ├── hair_1.png
│   │   ├── hair_2.png
│   │   └── hair_3.png
│   ├── dress/
│   │   ├── dress_1.png
│   │   ├── dress_2.png
│   │   └── dress_3.png
│   └── shoes/
│       ├── shoes_1.png
│       ├── shoes_2.png
│       └── shoes_3.png
├── background.jpg        # Game background
└── ui/
    ├── button_bg.png     # Selection button background (optional)
    └── hand_cursor.png   # Hand hint cursor (optional)

Customization Options

Colors

Edit generated config.js:

  • primaryColor: Main theme color
  • buttonBorderColor: Selected item border color
  • backgroundOverlay: Background tint

Layout

Edit generated style.css:

  • --character-scale: Character size (default: 1.1)
  • --button-size: Selection button size
  • --bottom-spacing: Distance from buttons to screen bottom

Categories

Modify steps array in index.html to change clothing categories:

  • Default: ['hair', 'dress', 'shoes']
  • Can add: ['accessory', 'makeup', 'background']

Output Structure

output/
├── index.html      # Main game file (v57)
├── mraid.js        # MRAID support
└── assets/         # Copied and optimized images

Platform Support

  • Mintegral: Full support with MRAID 3.0
  • Other platforms: Generic playable format

Best Practices

  1. Image sizes: Keep character parts under 500KB each
  2. Format: Use PNG for transparency, JPG for backgrounds
  3. Dimensions: Character parts should align at same canvas size
  4. Testing: Always test on actual mobile devices

Version History

  • v57: Fixed hair/head item selection bug (index mismatch)
  • v56: Initial version

Advanced: Manual Customization

For full control, edit the generated index.html:

  • defaultHair, defaultDress, defaultShoes: Set default outfits
  • gameReady(), gameStart(), gameEnd(): Lifecycle hooks
  • window.install(): CTA button action

Troubleshooting

Character parts not aligning: Ensure all images have same canvas size and anchor point.

Buttons too small/large: Adjust --button-size in CSS or regenerate with different base size.

Performance issues: Reduce image file sizes, limit to 3-4 clothing items per category.

Selection showing wrong item: Fixed in v57 - ensure using latest template.

Files

5 total
Select a file
Select a file to preview.

Comments

Loading comments…