Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Absence Management Company Video
v1.0.0Creates short demo and testimonial videos showcasing workforce scheduling, compliance automation, and analytics to attract HR directors and operations managers.
⭐ 0· 13·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description match the SKILL.md content: the skill's stated purpose is to create short demo/testimonial videos from workforce performance data and testimonials. That capability is coherent with the description.
Instruction Scope
The SKILL.md is vague and open-ended. It explicitly says it will 'turn your workforce performance data, your HR technology credentials, and your ... testimonials into clips' but provides no concrete, constrained instructions about where data is read from, where outputs are stored/sent, or how credentials are used. This grants broad discretion and could lead the agent to request or handle sensitive data in unspecified ways.
Install Mechanism
No install spec and no code files — instruction-only skill. This is the lowest-risk install model; nothing is written to disk by an installer.
Credentials
The SKILL.md references 'HR technology credentials' but the registry metadata lists no required environment variables or credentials. That inconsistency means the skill may expect sensitive credentials without declaring them, which is disproportionate and unclear.
Persistence & Privilege
always is false and there are no install or config changes requested. The skill does not request persistent or elevated platform privileges.
What to consider before installing
This skill is instruction-only and matches its stated purpose, but the runtime text mentions using HR platform credentials and workforce data without saying how those credentials/data should be provided, stored, or protected. Do not supply sensitive credentials or raw HR data to the skill until the author clarifies: (1) exactly what inputs are required and how they must be provided, (2) where video generation happens (local vs external service), (3) how any credentials are used and secured, and (4) whether any data is transmitted to third parties. Prefer skills that explicitly declare required environment variables, data flows, and privacy practices. If you want to proceed for testing, use dummy/test data and never real employee or production credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk97d34pprbcv5jsq4wzk5b4gx5849g9n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.