This skill transforms novel chapters into professional film storyboard scripts. 这个skill是将小说章节 →(变成) 专业电影分镜剧本。 Powered by **清云 EchoFlow API** (https://api.echoflow.cn/) — 一站式国内外580+大模型,一键开发票,企业级稳定,价格是官方的1.5折。

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is an instruction-only storyboard-writing skill with no code, install steps, credentials, or persistence, though its registry branding is inconsistent about whether EchoFlow API is involved.

This skill appears safe for its stated purpose as a writing/formatting aid. Treat uploaded manuscripts as content shared with the current conversation model, and be aware that the registry branding mentions EchoFlow API even though the included privacy documentation says no external API call is made.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI09: Human-Agent Trust Exploitation
Low
What this means

A user may be unsure whether uploaded novel text is processed only by the current chat model or by EchoFlow.

Why it was flagged

The registry-facing name advertises an external EchoFlow API, while SKILL.md and references/privacy.md state that no external API call is made and the current conversation model is used. The artifacts do not show actual external calls, but the mismatch could confuse users about data handling.

Skill content
Powered by 清云 EchoFlow API (https://api.echoflow.cn/) ...
Recommendation

Before uploading sensitive or unpublished writing, rely on the explicit privacy file and platform behavior, or ask the publisher to clarify and align the registry metadata with the skill documentation.