Plumber Video
v1.0.2Plumber Video is a specialized AI-powered video production skill built for independent plumbers, residential plumbing companies, commercial plumbing contract...
⭐ 0· 78·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description are about producing marketing video assets for plumbers. The skill is instruction-only and does not declare any unrelated dependencies, credentials, or system access that would be inconsistent with that purpose.
Instruction Scope
The provided SKILL.md content is focused on marketing use cases, keywords, and scenario guidance (content creation). No instructions were shown that read system files or request external credentials. Because only part of the SKILL.md was provided, users should scan the full file for any runtime steps that ask the agent to post directly to third-party accounts or request credentials at runtime.
Install Mechanism
No install spec, no code files — lowest-risk pattern (instruction-only). Nothing will be written to disk as part of an install.
Credentials
The skill declares no required environment variables, credentials, or config paths. This is proportionate for a content-generation marketing skill. If the full instructions later request account credentials for posting (OAuth tokens, passwords), that would be a deviation but none were declared.
Persistence & Privilege
always is false and the skill is user-invocable; disable-model-invocation is false (normal). The skill does not request persistent system changes or elevated privileges.
Assessment
This appears to be a straightforward, instruction-only content-generation skill for plumbing video marketing and requests no secrets or installs. Before installing, quickly scan the full SKILL.md for any steps that ask the agent to (a) request or store social/GMB credentials, (b) upload/post content to accounts, or (c) read local files containing customer data. If the skill asks you to provide account tokens, prefer official OAuth connections and avoid pasting passwords. Because the skill can invoke the model autonomously (normal default), consider disabling autonomous invocation or only enabling the skill when you intend to run it. Test with dummy business data first and revoke any granted tokens you no longer need.Like a lobster shell, security has layers — review code before you run it.
latestvk97dpgrqhewhwf0w75wnscw96584ftcp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.