ClawHub

AI UGC

v0.0.4

Call the RawUGC API to generate AI videos/images/music, manage content (personas, products, styles, characters), schedule social media posts, research TikTok...

⭐ 2· 857·4 current·4 all-time
byCoderBot@tfcbot
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (generate videos/images/music, manage personas/products/styles/characters, schedule posts, research TikTok) match the documented API endpoints in SKILL.md and reference.md. The only required env var (RAWUGC_API_KEY) is exactly what an API client needs.
✓
Instruction Scope
SKILL.md gives concrete, scoped instructions to read RAWUGC_API_KEY and call https://rawugc.com/api/v1 endpoints with an appropriate version header. It does not instruct reading unrelated files, other credentials, or exfiltrating data to third-party endpoints. It warns not to log the key.
✓
Install Mechanism
No install spec and no code files (instruction-only). Nothing is written to disk or downloaded during install, which minimizes surface area.
✓
Credentials
Only RAWUGC_API_KEY is required. No unrelated secrets, config paths, or multiple credentials are requested. The credential requested is proportional to the skill's purpose.
✓
Persistence & Privilege
The skill is not forced-always, does not request system-wide changes, and contains no install-time persistence. disable-model-invocation is false (agent may call the skill autonomously), which is the platform default and not itself a red flag here.
Assessment
This skill appears coherent and only needs your RawUGC API key. Before installing, confirm you trust rawugc.com and that the API key you provide has minimal necessary scope; be aware uploaded or generated media could be published if your RawUGC account is linked to social accounts (check RawUGC's dashboard and permissions). Because the skill can be invoked by the agent, consider whether you want the agent to call RawUGC autonomously or prefer to only call it manually. Avoid sharing the API key elsewhere, rotate it if you suspect misuse, and do not provide other unrelated credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bc1zhqjnpckxcdsfffnqs5n82k5hv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvRAWUGC_API_KEY

Comments