Tech Blog Generator
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This skill appears to be a simple Markdown blog-post generator with no evidence of credential access, network activity, persistence, or destructive behavior.
This looks safe to use for generating Markdown drafts. Be aware that some documented options may not actually work, and because provenance metadata is sparse, review the small included shell script if you plan to install or run it.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users have limited source/provenance information to verify the origin of the included script, although the provided script content appears simple and purpose-aligned.
The package includes an executable shell script, but the metadata does not provide a homepage or repository for provenance. The script itself is small and reviewable, so this is a transparency note rather than a concern.
"homepage": "", ... "repository": "", ... "dependencies": {}Review the included shell script before use and prefer packages that provide a repository or homepage for provenance.