Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
iBlipper Expressive Typography - Remember reading is automatic!
v1.0.1Generate kinetic typography animations for expressive agent-to-human communication. Use when you want to communicate with visual flair - animated text for announcements, alerts, greetings, dramatic reveals, or any message that deserves more than plain text. Outputs shareable URLs or can display in canvas.
⭐ 0· 2k·0 current·0 all-time
by@andyed
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description, SKILL.md, examples, and the included shell script all consistently build URLs for an external GitHub Pages animation site (https://andyed.github.io/iblipper2025/). The script only outputs URLs or markdown links and does not itself contact external services, which matches the stated purpose.
Instruction Scope
SKILL.md instructs the agent to open the animation URL in a browser (including a 'browser action=open' example) and to perform a local filesystem command to find downloaded GIFs (ls -t ~/Downloads/iblipper_*.gif). Those actions are reasonable for the GIF export workflow but do require a browser tool and file-system access. The instructions do not request any unrelated secrets or endpoints.
Install Mechanism
No install spec — instruction-only with one helper script included. Nothing is downloaded or executed during an install step, so install risk is low.
Credentials
The manifest declares no required binaries or config-paths, but the included script invokes python3 for URL-encoding and SKILL.md expects access to ~/Downloads to locate GIFs. Those runtime requirements are not declared, creating a mismatch: the skill implicitly requires python3 and permission to read the user's Downloads directory when exporting GIFs.
Persistence & Privilege
Skill is not always-enabled and requests no persistent privileges or credentials. It does not modify other skills or system settings.
What to consider before installing
What to consider before installing:
- Function: The skill simply builds shareable animation URLs for a GitHub Pages site and provides a small shell helper. The helper only prints URLs or markdown and does not exfiltrate data.
- Runtime requirements: The shell script calls python3 (for URL encoding) but the manifest lists no required binaries. If you plan to run the included script, ensure python3 is available on your agent host.
- GIF export behavior: The GIF workflow requires opening a browser tool and reading your Downloads folder to find the generated file. That means the agent will access your browser and local filesystem when you use export features—only enable those capabilities if you trust the site and the agent's browser integration.
- Remote content: The animations are hosted at andyed.github.io. The hash fragment (#...) is client-side and not sent to the server, but the query parameter used for export (?export=gif) is sent to the host and triggers rendering/download behavior. Verify you trust https://andyed.github.io/iblipper2025/ before allowing automated opens/downloads.
- Recommendations: If you only need hyperlinks, use the script in its default mode (it only prints URLs). If you use GIF export, run the browser step manually or ensure the agent has explicit permission to open external pages and access downloads. Avoid sending sensitive content through animated links.Like a lobster shell, security has layers — review code before you run it.
latestvk977064e6eaq5knpkn81fb3j8x80ayjs
License
MIT-0
Free to use, modify, and redistribute. No attribution required.