YouTube Title Generator
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: youtube-title-generator Version: 1.0.0 The skill is classified as suspicious due to its instruction to the AI agent to use `web_fetch` to retrieve content from user-provided URLs (SKILL.md). While this capability is plausibly needed for the stated purpose of analyzing content, `web_fetch` is a powerful network access primitive that introduces a risk of Server-Side Request Forgery (SSRF) or other network-based attacks if a malicious user provides a crafted URL. There is no clear evidence of intentional malicious behavior by the skill itself, but the presence of this risky capability without robust explicit safeguards warrants a 'suspicious' classification.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If you provide a URL, the agent may retrieve that page, and the generated titles will be saved locally in the youtube-title folder.
The skill may use a web-fetching tool for user-supplied URLs and write generated results to a scoped local file. This is disclosed and purpose-aligned, but users should be aware of the data flow.
If the user provides a URL, use web_fetch to retrieve the content. ... Save the complete output to `youtube-title/titles-{timestamp}.md`Only provide URLs and content you are comfortable having analyzed, and review the saved title file if the source material is private or sensitive.