Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Faith Content Cron — Daily Scripture & Devotional Posts
v1.0.0Generates and schedules daily scripture, devotionals, and prayer prompts tailored for specified social platforms and user preferences.
⭐ 0· 65·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name, description, README, and SKILL.md are consistent: the skill generates platform-specific scripture/devotional content, makes a weekly calendar, and can post or queue content. There are no unrelated capabilities requested (no downloads, no external services named in the description beyond social platforms).
Instruction Scope
SKILL.md confines file I/O to its own directory (skills/faith-content-cron/config.json and post-log.json) and outlines content-generation steps clearly. It does instruct the agent to 'post to each configured platform using available channel tools' when auto-post is enabled — that directs data to external platforms (expected for this purpose) but leaves how credentials/tools are supplied unspecified.
Install Mechanism
Instruction-only skill with no install spec and no code files. Lowest-risk delivery: nothing is downloaded or written by an installer beyond the config/log files the skill itself asks to create.
Credentials
The skill can auto-post to social platforms, which requires platform credentials or connectors, but requires.env and primary credential fields are empty and the SKILL.md does not document what credentials are needed or how they will be stored/used. That mismatch (ability to perform networked posting vs. no declared credential requirements) is disproportionate and worth verifying.
Persistence & Privilege
always:false (no forced always-on). The skill writes/reads config and log files under its own path — this is normal for a content-scheduling skill and does not request elevated or cross-skill privileges.
What to consider before installing
This skill is coherent for generating and scheduling faith-based social content, but before installing you should: (1) Confirm how auto-posting will authenticate — which channel tools or platform accounts will be used and where those credentials live, since the skill does not declare required env vars. (2) Prefer starting with Auto-post = NO (generate-only) to verify outputs and file writes, then test posting on a single test account. (3) Review and approve the config saved to skills/faith-content-cron/config.json and inspect post-log.json for what the skill records. (4) Ensure any connectors/agent channel tools have limited privileges (only posting on the intended accounts). (5) If you need stronger assurance, ask the publisher for details about how credentials are used/stored or request an explicit list of required tokens/permissions prior to enabling auto-posting.Like a lobster shell, security has layers — review code before you run it.
automationvk97404cd7p6xcmtgtv9dh1hp11839mccchristianvk97404cd7p6xcmtgtv9dh1hp11839mcccontentvk97404cd7p6xcmtgtv9dh1hp11839mccfaithvk97404cd7p6xcmtgtv9dh1hp11839mcclatestvk97404cd7p6xcmtgtv9dh1hp11839mccscripturevk97404cd7p6xcmtgtv9dh1hp11839mcctiktokvk97404cd7p6xcmtgtv9dh1hp11839mcc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.