Generate Real Estate Ad Creative Brief

Plan targeted visuals and messaging for real estate paid campaigns tailored to teams, brokers, and listing marketers.

This skill appears to do what it claims (generate real-estate ad creative briefs) and has no requested credentials, but there are small red flags you should check before installing: - Verify the source: the registry metadata (owner/slug) does not match the README's GitHub repo/ClawHub name and the SKILL.md references a SkillBoss homepage — confirm which repository or publisher is the real source. Installing code from an unexpected repo increases risk. - Confirm tool permissions: the skill lists Bash and Read as allowed tools even though the instructions don't need them. If your agent grants file or shell access to skills, consider removing or restricting those permissions unless needed. - Clarify 'SkillBoss capabilities': ask what external capabilities or endpoints the skill will call to 'enrich assets' so you can judge whether data will leave your environment. - Review outputs before publishing: the SKILL.md itself advises review, which is good practice — do not let the skill auto-publish or auto-run external actions without explicit confirmation. If you cannot verify the true source or the intended external capabilities, avoid installing or running the skill with elevated permissions. If you can confirm the origin and remove unnecessary tool permissions, the risk is low.

Type: OpenClaw Skill Name: toby-generate-real-estate-ad-creative-brief Version: 1.0.0 The skill bundle requests 'Bash' tool access in SKILL.md, which is a high-privilege permission unnecessary for its stated purpose of generating real estate ad creative briefs. This over-permissioning constitutes a broad permission risk. Additionally, the metadata in _meta.json contains a future-dated timestamp (2026), and the SKILL.md file contains repetitive links to an external domain (skillboss.co), though no explicitly malicious code or exfiltration logic was identified.