Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AI Content Generator Pro

v1.0.1

AI Content Generator Pro offers multi-model AI content creation for blogs, social media, SEO-optimized marketing, with tone control, scheduling, and integrat...

0· 198·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for jacealllc/ai-content-generator-pro.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "AI Content Generator Pro" (jacealllc/ai-content-generator-pro) from ClawHub.
Skill page: https://clawhub.ai/jacealllc/ai-content-generator-pro
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ai-content-generator-pro

ClawHub CLI

Package manager switcher

npx clawhub@latest install ai-content-generator-pro
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill advertises multi-model integration, CMS and social posting, plagiarism checks and API integrations (OpenAI, Anthropic, xAI). The code is a prototype that currently simulates AI responses rather than performing real API calls, and the registry metadata declares no required environment variables or credentials even though SKILL.md and configs instruct users to configure API keys (openai.api_key, anthropic.api_key, etc.). Integration capabilities (auto-posting to WordPress/Shopify/social platforms) are described, but there is no declared or explicit handling of the external platform credentials in the metadata or config examples. This mismatch between claimed capabilities and declared requirements is a coherence concern.
!
Instruction Scope
SKILL.md instructs users to set API keys via openclaw config and to run the skill; the top-level code saves generated content to the user's current working directory (process.cwd()/content) and to an internal SQLite DB. The instructions also promise auto-posting and integrations, but the provided code is a simulated prototype and does not show implementation for posting to external services; this leaves open the possibility that later versions or setup scripts could request or use additional credentials or network endpoints not described in the metadata. The SKILL.md also includes installation commands and configuration steps that would cause a user to provide API keys without the skill declaring them as required in metadata.
Install Mechanism
There is no formal install specification (instruction-only in registry), but the package contains code, a package.json with npm dependencies, and shell scripts (scripts/setup.sh, scripts/test.sh). package.json exposes npm scripts that call these shell scripts. Because setup.sh content was not provided in the snippet, it should be inspected before running; setup scripts can execute arbitrary commands. Absence of an explicit install spec in the registry is lower risk by itself, but bundled scripts + exec permission raise the need for manual review.
!
Credentials
The skill's declared metadata lists no required env vars or primary credential, but SKILL.md and config files clearly expect API keys for OpenAI, Anthropic, and xAI. package.json lists broad 'openclaw' permissions including read, write, exec, web_search, web_fetch. The code writes files to the current working directory and a local SQLite DB inside the skill folder; writing into process.cwd() may surprise users and can overwrite or add files outside the skill. The permission and credential handling are disproportionate/unexplained relative to the registry metadata.
!
Persistence & Privilege
The skill is not marked always:true (good), but package.json requests broad OpenClaw permissions (read/write/exec/web_fetch/web_search). The skill writes persistent content to disk (content files and a SQLite DB). The combination of exec permission, bundled setup scripts, and I/O to the user's working directory increases the surface area and potential impact of malicious or buggy behavior. There's no explicit modification of other skills or system-wide configs in provided files, but the broad permissions are notable and should be justified.
What to consider before installing
Do not run setup or install scripts without inspection. Before installing or running this skill: 1) Open and review scripts/setup.sh, scripts/test.sh and any deploy script for network calls or harmful commands. 2) Inspect the rest of index.js (it was truncated) for child_process.exec usage, outbound network requests, hardcoded endpoints, or credential exfiltration. 3) Note that the registry metadata declares no required env vars but SKILL.md asks you to set API keys (openai.api_key, anthropic.api_key, xai.apiKey) — verify how and where keys are stored and that they are not logged or transmitted to unknown endpoints. 4) Confirm you trust the publisher (contact support@supposed vendor or verify homepage); the package contains differing price claims and marketing inconsistencies which reduce confidence. 5) Run in an isolated/sandbox environment (or container/VM) if you want to test functionality, and avoid running setup.sh on a production machine. 6) If you need CMS or social posting features, expect those to require additional OAuth tokens — the skill does not declare those upfront. If you want, paste the contents of scripts/setup.sh and the truncated portion of index.js and I can review them for suspicious behavior.
!
index.js:278
Potential obfuscated payload detected.
About static analysis
These patterns were detected by automated regex scanning. They may be normal for skills that integrate with external APIs. Check the VirusTotal and OpenClaw results above for context-aware analysis.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bj2fymzfbw0rv01k4mbxtw18361f7
198downloads
0stars
2versions
Updated 20h ago
v1.0.1
MIT-0

AI Content Generator Pro Skill

Overview

AI Content Generator Pro is a premium skill ($89) for OpenClaw that provides comprehensive AI-powered content generation capabilities. It enables users to create high-quality content for blogs, social media, marketing materials, and more using multiple AI models (ChatGPT, Claude, Grok) with advanced features like tone adjustment, SEO optimization, and workflow automation.

Market Research Summary

Based on 2026 market analysis:

  • Market Size: AI content generation market is rapidly growing with increased adoption across businesses
  • Key Players: Jasper ($49-$199/mo), Copy.ai ($49-$89/mo), Writesonic ($39-$129/mo)
  • Pain Points: Lack of personalization, context understanding, creativity, integration challenges, quality control
  • Opportunity: Premium tool with multi-model support, advanced features, and OpenClaw integration

Target Audience

  1. Content Creators: Bloggers, YouTubers, podcasters needing consistent content
  2. Marketers: Social media managers, email marketers, SEO specialists
  3. Business Owners: Small to medium businesses needing marketing content
  4. Agencies: Marketing agencies serving multiple clients
  5. Developers: Technical writers, documentation specialists

Core Features

1. Multi-Model Content Generation

  • Support for ChatGPT (OpenAI), Claude (Anthropic), Grok (xAI)
  • Model comparison and selection based on content type
  • Fallback mechanisms when primary model fails

2. Content Types

  • Blog Posts: Long-form articles with SEO optimization
  • Social Media: Posts for Twitter, LinkedIn, Instagram, Facebook
  • Email Campaigns: Newsletters, promotional emails, sequences
  • Product Descriptions: E-commerce product content
  • Ad Copy: PPC ads, social media ads, display ads
  • Video Scripts: YouTube, TikTok, Instagram Reels
  • Landing Pages: Conversion-optimized web pages

3. Advanced Features

  • Tone Adjustment: Formal, casual, humorous, persuasive, educational
  • SEO Optimization: Keyword integration, meta descriptions, readability scoring
  • Brand Voice Training: Learn from existing content to maintain consistency
  • Content Calendar: Schedule and plan content creation
  • Workflow Automation: Multi-step content generation pipelines
  • Plagiarism Check: Ensure originality of generated content
  • Image Suggestions: Recommend images for generated content

4. Integration Capabilities

  • CMS Integration: WordPress, Shopify, Webflow
  • Social Media: Auto-posting to platforms (with approval)
  • File Formats: Export to Markdown, HTML, PDF, DOCX
  • API Access: REST API for custom integrations

Technical Architecture

Skill Structure

ai-content-generator-pro/
├── SKILL.md
├── package.json
├── index.js
├── config/
│   ├── models.json
│   ├── templates.json
│   └── prompts.json
├── lib/
│   ├── generators/
│   │   ├── blog.js
│   │   ├── social.js
│   │   ├── email.js
│   │   └── product.js
│   ├── models/
│   │   ├── openai.js
│   │   ├── anthropic.js
│   │   └── xai.js
│   ├── utils/
│   │   ├── seo.js
│   │   ├── tone.js
│   │   └── validation.js
│   └── storage/
│       └── content-db.js
├── scripts/
│   ├── setup.sh
│   ├── test.sh
│   └── deploy.sh
└── references/
    ├── pricing-comparison.md
    ├── market-research.md
    └── api-docs.md

Dependencies

  • openai: OpenAI API client
  • @anthropic-ai/sdk: Anthropic Claude API
  • @xai/grok: xAI Grok API (when available)
  • cheerio: HTML parsing for SEO
  • marked: Markdown processing
  • date-fns: Date manipulation for content calendar
  • sqlite3: Local content storage

Pricing Strategy

  • Skill Price: $89 (one-time purchase)
  • Value Proposition:
    • Saves $588+/year compared to Jasper ($49/mo = $588/year)
    • Multi-model support (vs single model in competitors)
    • OpenClaw integration advantage
    • No monthly subscription fees
  • Upsell Opportunities:
    • Enterprise features: $299
    • API access: $89/year
    • Priority support: $49/year

Implementation Plan

Phase 1: Core Generation (Weeks 1-2)

  1. Set up project structure and dependencies
  2. Implement basic content generation with OpenAI
  3. Create blog post and social media generators
  4. Add tone adjustment features

Phase 2: Advanced Features (Weeks 3-4)

  1. Add Claude and Grok model support
  2. Implement SEO optimization
  3. Create content calendar
  4. Add export capabilities

Phase 3: Integration & Polish (Weeks 5-6)

  1. Add CMS and social media integrations
  2. Implement brand voice training
  3. Add plagiarism checking
  4. Create comprehensive documentation

Phase 4: Testing & Launch (Week 7)

  1. Beta testing with select users
  2. Performance optimization
  3. Security review
  4. Launch preparation

Competitive Advantages

  1. Multi-Model: Use best model for each task
  2. OpenClaw Native: Deep integration with OpenClaw ecosystem
  3. One-Time Fee: No recurring subscription
  4. Local Storage: Content stored locally for privacy
  5. Customizable: Open source skill that can be extended

Success Metrics

  • Adoption: 100+ sales in first 3 months
  • Revenue: $17,900+ from initial sales
  • User Satisfaction: 4.5+ star rating on ClawHub
  • Retention: 80%+ active usage after 30 days

Risk Mitigation

  1. API Cost Management: Implement usage limits and caching
  2. Model Availability: Fallback mechanisms for API failures
  3. Content Quality: Human review recommendations
  4. Legal Compliance: Plagiarism checking and copyright guidance

Future Roadmap

  • Q2 2026: Add video script generation
  • Q3 2026: Implement AI image generation integration
  • Q4 2026: Add team collaboration features
  • 2027: Enterprise content management system

Getting Started

# Install the skill
openclaw skill install ai-content-generator-pro

# Configure API keys
openclaw config set openai.api_key YOUR_KEY
openclaw config set anthropic.api_key YOUR_KEY

# Generate your first blog post
openclaw content generate blog --topic "AI Future" --length 1000

Support

  • Documentation: Included in skill
  • Community: OpenClaw Discord channel
  • Email Support: First 30 days included
  • Updates: Free for 1 year

Comments

Loading comments...