ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

YouTube Title Generator

v1.0.0

Generates compelling YouTube title ideas from content concepts. Use when someone needs click-worthy video titles using proven structural formulas and psychological patterns from high-performing videos.

⭐ 0· 1.9k·0 current·0 all-time
by@vincentchan
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description match the runtime instructions: the skill transforms user content ideas into title suggestions. It only references a local reference file and saving outputs under youtube-title/, and asks the agent to fetch user-provided URLs when supplied — all congruent with a title-generation tool. No unrelated env vars, binaries, or installs are requested.
ℹ
Instruction Scope
SKILL.md stays on-task: collect input, optionally web_fetch a provided URL, optionally read youtube-title/reference-titles.md, generate titles, and save them to youtube-title/titles-{timestamp}.md. Note: web_fetch will retrieve whatever URL the user provides and the skill will read/write files in the youtube-title/ path — expected for this purpose but worth noting because those are the only external data accesses.
✓
Install Mechanism
No install spec and no code files — instruction-only skills have the lowest installation risk. Nothing is downloaded or written to disk by an installer.
✓
Credentials
The skill requires no environment variables, credentials, or unrelated configuration paths. The amount and type of access requested (optional reading of a namespaced reference file, optional web_fetch of user-provided URLs, and saving outputs to a namespaced folder) are proportional to generating and storing titles.
✓
Persistence & Privilege
always is false and there are no special persistence or cross-skill configuration changes. The skill can be invoked autonomously by the agent (the platform default), which is expected for skills of this type.
Assessment
This skill appears coherent and low-risk for its purpose, but consider these points before installing: (1) It may fetch any URL you provide — do not supply private, internal, or sensitive links unless you trust the skill. (2) It reads/writes files only under the youtube-title/ paths (reference-titles.md and titles-{timestamp}.md); review those files if you want to inspect outputs or inputs. (3) Generated titles are intentionally provocative/hyperbolic — review for accuracy, policy compliance, and plagiarism before publishing. (4) Because it's instruction-only and requests no credentials, the main risk is content you give it; avoid giving it secrets or proprietary text you cannot share. If you want stronger assurances, ask the skill author for a source/homepage or request that the skill confirm exactly which files it will read/write before first run.

Like a lobster shell, security has layers — review code before you run it.

latestvk973ts30zz79b24gmy4tb6v9hn80068q

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments