Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
AI Copywriting Generator
v1.0.0Generate optimized marketing copy for 20+ platforms including Xiaohongshu, TikTok, WeChat, and e-commerce pages using AI-powered templates and keywords.
⭐ 0· 301·3 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description (AI copywriting for multiple platforms) matches the provided code and instructions: templates for platforms, generate/optimize methods, and a CLI entrypoint are implemented. Use of an LLM client (OpenClaw) is coherent with the stated purpose.
Instruction Scope
SKILL.md shows how to install and use the library but does not mention the required OPENCLAW_API_KEY. The code will raise an exception if OPENCLAW_API_KEY is not set and will send product/features/target text to the OpenClaw service. The SKILL.md also suggests pip installing a third‑party package (openclaw) but provides no provenance or privacy warning about sending user content to a remote API.
Install Mechanism
There is no platform install spec (instruction-only), and the SKILL.md recommends 'pip install openclaw'. This is low-to-moderate risk but you should verify the pip package source and trustworthiness of the 'openclaw' package before installing.
Credentials
Registry metadata declares no required environment variables, but the code requires OPENCLAW_API_KEY (and will abort if it's not set). The missing declaration is an incoherence. Requiring a single API key for the configured client is reasonable for this skill, but it must be declared and justified in metadata and docs.
Persistence & Privilege
The skill does not request elevated or persistent platform privileges: always is false, it doesn't modify other skills or system config, and it is user-invocable. Nothing in the files indicates it will persistently alter agent settings.
What to consider before installing
This skill appears to do what it says (generate marketing copy) but there are two practical concerns to resolve before installing or running it: (1) the Python code requires an OPENCLAW_API_KEY environment variable but the registry metadata and SKILL.md do not declare or document that requirement — ask the author to add this to the metadata and docs; (2) using the skill sends your product descriptions and targets to the OpenClaw API (via the 'openclaw' client). Verify the origin and integrity of the 'openclaw' pip package (is it the official client?), confirm the privacy policy of the OpenClaw service, and only provide non-sensitive sample data until you trust the library. If you need higher assurance, request the author to: (a) update metadata to list OPENCLAW_API_KEY as required, (b) document where 'openclaw' is published (PyPI URL or company homepage), and (c) add a note in SKILL.md about what data is transmitted and retention/privacy practices.Like a lobster shell, security has layers — review code before you run it.
latestvk971sgzwwz91qt9g3t839ejtp5833p43
License
MIT-0
Free to use, modify, and redistribute. No attribution required.