Skills/ClawHub/ai-ugc-ad-video

ai-ugc-ad-video@1.0.3

VERIFIED

Publisher claims: "Open-source alternative to Arcads: AI UGC ads with an AI actor holding your real product. Casts a creator whose age matches the claim in the room where the problem happens, writes a phone-real script (a yapper, unboxing, street interview or in-car take) with every line in the prompt, locks the face, the voice and the product label across shots, prompts camera flaws and breaths so it doesn't look waxy, generates on Seedance 2.5, Kling 4 or Creatify through varg, and labels it. It never puts a first-person testimonial or result in an AI mouth (FTC rule) and never targets TikTok Shop presenters (AI voices banned there). Use when someone wants AI UGC ads, an AI creator or actor talking about their product, Arcads/Creatify/MakeUGC-style ads, or UGC without hiring creators. NOT for TikTok Shop affiliate videos (use tiktok-shop-video), product-only shots with no person (use product-photo-to-video), or the same characters across a multi-scene story (use varg-consistent-characters)." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher vargai · joined 9 days agoInstalls 182Last detonated 52 min ago
$clawhub install ai-ugc-ad-video
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-06 and scored it 84/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
HTML comment carrying imperative instructions to the agentREADME.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

No other findings across 329 lines in 4 files.

Cost to the agent

Instructions loaded
≈2,046 tok
1 file · 4 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

ai-ugc-ad-video@1.0.3 safety verdict: Verified 84/100 — KillerSkills