Generate Legal Services Ad Creative Brief

Create tailored ad campaign visuals and hooks to promote legal services for attorneys, compliance, and legal operations teams.

This skill appears to do what it says (generate ad creative briefs) and declares no secrets, which is good. Before installing or running it: 1) Be cautious about the README’s manual install commands — they point to a GitHub repo and install slug (qiaomu...) that don't match the registry owner metadata; if you plan to git-clone or run anything from that URL, inspect the repository contents first. 2) Consider whether you want the agent to have 'Bash' permission — SKILL.md doesn't need shell access, so you can restrict allowed tools to reduce risk. 3) Because the skill can be invoked autonomously by default, only enable it if you trust the source; otherwise disable autonomous invocation or require explicit user invocation. 4) If you will present outputs to clients, follow the skill’s own advice: perform human review and do not treat outputs as legal advice. If you want, provide the registry owner or upstream repository URL so the inconsistencies can be reconciled and the confidence increased.

Type: OpenClaw Skill Name: toby-generate-legal-services-ad-creative-brief Version: 1.0.0 The skill requests 'Bash' and 'Read' tool permissions despite its stated purpose being the generation of legal ad creative briefs, which typically only requires text and image generation APIs. The SKILL.md file contains highly repetitive external links (skillboss.co) injected throughout the metadata section, which is characteristic of low-quality templates or SEO-spamming within agent instructions. While no explicitly malicious code is present, the unnecessary 'Bash' privilege creates an avoidable attack surface.