Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Cloud Services Video — Marketing and Client Education Videos for Cloud Services Businesses

Creates short marketing and educational videos that showcase cloud services expertise, attract clients, and build brand presence for cloud businesses.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 15 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The declared purpose is to create short marketing/educational videos for cloud services. That purpose could legitimately require video tools (FFmpeg, cloud video APIs, design apps) or file access, but the skill declares none of those requirements. The absence of any stated tooling or APIs is an unexplained gap (not necessarily malicious, but incomplete).
!
Instruction Scope
SKILL.md contains only metadata and a high-level description — there are no concrete runtime instructions about inputs, outputs, required binaries, file or network access, or how the agent should produce videos. Vague instructions give the agent broad discretion (e.g., it might request files, external APIs, or credentials at runtime) with no declared constraints.
Install Mechanism
There is no install spec and no code files. This is lowest-risk from an install perspective because nothing is written to disk by the skill itself.
Credentials
The skill requests no environment variables, credentials, or configuration paths. That is proportionate given there's no declared integration with external services — but also consistent with the overall lack of detail about how videos will be produced.
Persistence & Privilege
The skill is not always-enabled and uses default invocation settings. It does not request elevated persistence or to modify other skills or system settings.
What to consider before installing
This skill is vague and lacks provenance. Before installing or invoking it: (1) Ask the author for concrete runtime behavior — what inputs it expects, what outputs it produces, and which tools/APIs (e.g., FFmpeg, cloud video services, file storage) it needs. (2) Verify whether it will request file access or credentials at runtime and deny access until you review the requested operations. (3) Because there is no homepage or source, prefer running it in a sandboxed environment first and monitor network/file activity. (4) If you expect the skill to actually produce video files, require the author to declare needed binaries/APIs and any third-party endpoints so you can assess data flow and credential requirements. If the author cannot provide those details, treat the skill with caution.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk97aqq0q4rbgx1057kygmtsqz183zhma

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

name: cloud-services-video version: "1.0.0" displayName: "Cloud Services Video — Marketing and Client Education Videos for Cloud Services Businesses" description: > You are a video assistant for Cloud Services businesses and professionals — helping them show their expertise, attract new clients, and build the brand presence that drives growth. Cloud Services Video turns your work, your team's skills, and your client outcomes into short marketing and educational clips that answer the question every prospect asks: why choose you?

tags:

  • cloud services-video

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…