Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Social Caption Ab Writer

v1.0.0

Caption A/B variant writer for social media. Generate 5 caption variations for any post with different angles, tones, and CTAs — ready to split test across I...

0· 123·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for mguozhen/social-caption-ab-writer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Social Caption Ab Writer" (mguozhen/social-caption-ab-writer) from ClawHub.
Skill page: https://clawhub.ai/mguozhen/social-caption-ab-writer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install social-caption-ab-writer

ClawHub CLI

Package manager switcher

npx clawhub@latest install social-caption-ab-writer
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description match the behavior: the SKILL.md and analyze.sh prompt a model to produce 5 caption variants, hashtags, CTAs, and testing guidance. However, the bundled analyze.sh depends on the 'openclaw' CLI and python3 even though no required binaries were declared in the skill metadata/manifest, which is an inconsistency.
Instruction Scope
SKILL.md and analyze.sh are narrowly scoped to generating caption variants and A/B testing guidance. The script constructs a prompt and sends it to a local OpenClaw agent; it does not read arbitrary files or environment variables beyond creating a session id and processing the agent JSON output.
Install Mechanism
There is no install spec and no downloads. The skill is instruction + a small helper script, so it does not perform network installs or extract remote archives.
!
Credentials
The manifest lists no required credentials or env vars, which is appropriate for this simple caption generator. However, analyze.sh invokes the local 'openclaw agent' CLI; that CLI may read local config, auth tokens, or model credentials from the host environment (not declared here). The missing declaration of required binaries (openclaw, python3) and the implicit reliance on the local agent's configuration creates a proportionality/visibility concern.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not request persistent privileges or attempt to modify other skills or system-wide settings.
What to consider before installing
This skill is largely coherent with its stated purpose, but exercise caution before running it. Specific steps to consider: - Inspect analyze.sh locally (you already have it) and confirm you understand what it does; it builds a prompt and calls the local 'openclaw agent' CLI and python3 for JSON parsing. - Be aware the script will send whatever you pass as the caption/topic to the local OpenClaw agent; that agent may read its own config and credentials on your machine — ensure those are safe and intended for use. - The skill metadata omitted required binaries; install or run only if you have and trust the openclaw CLI and python3 on your machine. - If you want less risk, run the prompt manually in a controlled environment or remove/replace the call to 'openclaw agent' with an explicit, audited API/CLI invocation you control. - Avoid passing sensitive or proprietary content to the script until you verify where the agent is sending or storing data and which credentials it uses.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f66etejbk43j562kga0fs2s83fmex
123downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Social Caption A/B Writer

Generate 5 battle-tested caption variants for any post, ready to A/B test.

Usage

caption: write 5 variants for a product launch post about wireless earbuds
caption writer: LinkedIn post about my startup's first 100 customers
A/B caption: Instagram post promoting a 30% off sale
caption variants: TikTok about morning routine productivity tips

What You Get

  1. 5 Caption Variants — different angles, tones, and structures
  2. Hashtag Sets — 3 hashtag groups optimized per variant
  3. CTA Variations — different call-to-action styles tested
  4. Best Posting Time — when to post each variant
  5. Testing Framework — how to run the A/B test properly
  6. Winner Prediction — which variant is most likely to win and why

Comments

Loading comments...