Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Instagram Image Generator

v1.0.0

Create high-performing Instagram content images — feed posts, stories, reels covers, and carousels. Use when the user mentions: 'Instagram', 'IG', 'IG post',...

0· 71·0 current·0 all-time
byMartian@zoohero500

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for zoohero500/rendshot-instagram.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Instagram Image Generator" (zoohero500/rendshot-instagram) from ClawHub.
Skill page: https://clawhub.ai/zoohero500/rendshot-instagram
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install rendshot-instagram

ClawHub CLI

Package manager switcher

npx clawhub@latest install rendshot-instagram
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name and description (Instagram image generation) align with the SKILL.md content: the workflow, design references, and example calls all focus on producing Instagram images and templates. However, the skill explicitly references Rendshot-style RPCs (generate_image, list_templates, create_template) and yet declares no required credentials or integration details—this is a notable omission but could be explained if the agent platform provides a built-in Rendshot connector.
Instruction Scope
The SKILL.md stays on-topic: it asks clarifying questions, references only the packaged reference docs, and shows example calls to image-generation/template RPCs. It does not instruct reading unrelated files, scanning system paths, or sending data to external endpoints beyond the abstract Rendshot calls. No open-ended instructions grant broad discretionary data collection.
Install Mechanism
This is an instruction-only skill with no install spec and no code files; nothing is written to disk and no external artifacts are fetched during install—this is low-risk from an install perspective.
!
Credentials
The skill makes repeated calls to generate_image, list_templates, create_template (i.e., an external image-generation service) but declares zero environment variables, credentials, or config paths. In practice, such API calls typically require an API key or service credential. The lack of any declared primaryEnv or required env vars is disproportionate or at least undocumented. This could be benign (if the hosting agent provides a built-in Rendshot tool), but the skill metadata does not explain that mapping—so the credential surface is unclear.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and declares no config paths. It is user-invocable and permits normal autonomous invocation (the platform default). There is no evidence it would gain persistent privileged presence beyond the normal skill model.
What to consider before installing
This skill appears to be a focused Instagram image/content generator and the included design/algorithm guidance matches that purpose. However: 1) It repeatedly calls functions like generate_image / list_templates / create_template but lists no API keys or environment variables—ask how those RPCs are provided (does your platform supply a built-in Rendshot connector?), and don't provide credentials until you confirm the target service and its privacy/security practices. 2) The skill has no homepage or source repository; prefer skills with clear provenance you can audit. 3) Confirm where generated images and templates are stored (are they uploaded to a third-party service?) and what data (captions, hashtags, user content) is sent. 4) If you need to supply an API key later, scope that key to only the minimum needed and use a revocable token. Providing that provenance and an explanation of how the abstract RPCs are implemented would reduce the risk and could make the skill benign.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dzveqqn9c31a7vbev35bejd84vgjc
71downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

Instagram Content Image Generator

Create feed posts, stories, reels covers, and carousel graphics optimized for Instagram's algorithm and visual standards.

Workflow

Step 1: Understand the Content Goal

Ask (if not provided):

  • What format? (feed post / story / reels cover / carousel)
  • What niche? (e.g., food, fitness, fashion, tech, travel)
  • What's the goal? (engagement, traffic, brand awareness, sales)
  • Personal brand or business?

Step 2: Apply Algorithm-Aware Decisions

Read references/algorithm.md for:

  • Format selection based on reach goals
  • Caption and hook strategies that boost ranking
  • Hashtag and engagement optimization
  • Avoid patterns that reduce distribution

Step 3: Apply Visual Style

Read references/design-style.md for:

  • Aesthetic selection by niche
  • Color palette and typography rules
  • Layout patterns per format
  • Visual consistency for brand building

Step 4: Generate with Rendshot

Feed Post (1080x1080):

generate_image({
  prompt: "Instagram feed post for a coffee brand, minimal aesthetic, large serif title 'The Art of Pour Over', warm brown palette, clean white background, product photo area at center",
  platform: "instagram_post",
  locale: "en"
})

Story (1080x1920):

generate_image({
  prompt: "Instagram story for a fitness coach, bold modern design, title 'CHEST DAY ROUTINE', neon accent on dark background, numbered list layout for 5 exercises",
  platform: "instagram_story",
  locale: "en"
})

Carousel (multi-call): Generate each slide individually with consistent style:

// Slide 1 — Cover
generate_image({
  prompt: "Instagram carousel cover slide, '5 Python Tips You Need', modern tech aesthetic, dark theme with green accents, bold sans-serif",
  platform: "instagram_post"
})

// Slide 2-5 — Content slides (use create_template for consistency)
generate_image({
  template_id: "tpl_carousel_slide",
  variables: { slide_number: "1", tip_title: "F-Strings", code_snippet: "..." }
})

Using templates:

list_templates({ platform: "instagram_post", q: "product showcase" })
get_template({ template_id: "tpl_xxx" })
generate_image({ template_id: "tpl_xxx", variables: { ... } })

Step 5: Save for Brand Consistency

create_template({
  name: "Coffee Brand IG Post",
  html: "<returned html>",
  variables: [...],
  platform: "instagram_post",
  tags: ["coffee", "minimal", "brand"]
})

Format Quick Reference

FormatPlatform presetSizeUse case
Feed postinstagram_post1080x1080Main feed content
Storyinstagram_story1080x1920Stories, reels covers
Landscapetwitter_post1200x675IGTV covers, link previews (no IG-specific landscape preset; this cross-platform size works)

Carousel Best Practices

  • Slide 1: Hook — bold title, curiosity gap, no text wall
  • Slides 2-N: One idea per slide, consistent layout template
  • Last slide: CTA ("Save this", "Follow for more", "Link in bio")
  • Use create_template after first slide to lock the layout for remaining slides
  • Optimal length: 5-10 slides (algorithm favors time-on-post)

References

Comments

Loading comments...