Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Youth Sports Program Video
v1.0.0Create promotional and recruitment videos for youth sports programs using game highlights, coach intros, and team culture clips to boost enrollment and commu...
⭐ 0· 61·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name and description align with creating promotional youth-sports videos. However the SKILL.md metadata includes apiDomain: https://mega-api-dev.nemovideo.ai which implies use of an external service; the skill declares no credentials or homepage/source, creating an unexplained dependency on a third-party endpoint.
Instruction Scope
Runtime instructions are high-level marketing text that ask users to 'Upload practice footage, game clips, or team photos' but provide no operational steps, no guidance about where uploads go, no data handling/retention rules, and no explicit handling of consent or privacy for minors — a substantive omission given the sensitive nature of the content.
Install Mechanism
No install spec and no code files are present (instruction-only), which minimizes installation risk because nothing is written to disk by the skill itself.
Credentials
The skill requests no environment variables or credentials, which on the surface is proportional. But the presence of apiDomain suggests calls to an external API that would typically require credentials or data-transmission policies; that mismatch is unexplained.
Persistence & Privilege
Skill does not request always:true and does not declare persistent system-level privileges. It appears to be user-invocable only.
What to consider before installing
This skill's purpose (making promo videos) is reasonable, but it leaves out important operational and privacy details. Before installing or using it, ask the publisher: (1) Do uploads go to https://mega-api-dev.nemovideo.ai or another service? (2) What credentials, if any, are needed and where are they stored? (3) How is uploaded footage of children stored, who can access it, how long is it retained, and is it encrypted? (4) What parental consent / privacy safeguards are required and enforced? If you plan to upload footage of minors, do not proceed until you have explicit answers and a privacy/data-deletion policy; avoid uploading identifiable children without documented parental consent and assurance that the service is trustworthy.Like a lobster shell, security has layers — review code before you run it.
latestvk97fy39qkr6c5vf1s25j510hjh83z4gt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.