Whiteboard Prompt Crafter

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a simple image-prompt helper; the only caution is that capability signals mention wallet, purchase, and credential concepts that the files themselves do not use.

This skill is reasonable to use for generating whiteboard-style images. Expect it to send your prompt to the image-generation tool and return the result through the message channel. Avoid uploading private reference images unless you are comfortable using them for image generation, and refuse any wallet, purchase, or sensitive-credential permission prompts because the reviewed artifacts do not justify them.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your prompt and generated image will be handled by the image-generation and message-delivery tools, and a PNG file will be created in the workspace.

Why it was flagged

The skill explicitly uses an image-generation tool, writes the generated file to /workspace, and sends it back via a message tool; this is expected for the stated purpose, but it is still tool-mediated output.

Skill content
调用 image_synthesize 生成图片 ... "output_file": "/workspace/[用户主题].png" ... 生成后用 `message` tool 发给用户(channel=feishu)
Recommendation

Use non-sensitive topics or reference material, keep generated files under the intended /workspace path, and review the image/prompt before sharing further.

What this means

If an installer or runtime asks for wallet, payment, or sensitive credential access for this skill, that would not be justified by the reviewed instructions.

Why it was flagged

These capability labels imply sensitive or payment-related authority that is not supported by SKILL.md, requirements, install specs, or code; requirements also list no primary credential or environment variables.

Skill content
Capability signals: crypto; requires-wallet; can-make-purchases; requires-sensitive-credentials
Recommendation

Do not grant wallet, purchase, or credential permissions for this skill unless the publisher provides clear, purpose-aligned justification and updated artifacts.