Skills/ClawHub/creator-account-teardown

creator-account-teardown@0.2.5

VERIFIED

Publisher claims: "Take apart a creator account and walk away with your own version of it. Bring what you can see — profile screenshots, the bio, a pasted list of recent posts with their counts, a few captions — or hand it the handle: it reads profiles and recent posts on Douyin, TikTok, Xiaohongshu, Instagram, YouTube and X, and comments on the first three. This account teardown and account diagnosis workflow reads the positioning, the audience it speaks to, the content matrix behind the grid, the hook and structure pattern its best posts repeat, and the posting cadence, then turns it into a build template for your own account: a positioning line, a bio, content pillars with formats and cadence, a viral formula, and an opening plan — finishing with your first post produced, its cover rendered and its script voiced. Use it for competitor account analysis, account benchmarking and comment analysis, for a new account or a stalled one." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher beatra-ai · joined 0 days agoInstalls 531Last detonated 2 h ago
$clawhub install creator-account-teardown
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
npx invocation of non-well-known packagescripts/mcp_client.py:1014 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/mcp_client.py:1022 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
creator-account-teardown@0.2.5 safety verdict: Verified 91/100 — KillerSkills