orshot@1.4.0

VERIFIED

Publisher claims: "Automate video, PDF and image generation from templates and social media posting. Image generation, PDF generation and video generation from your templates over the hosted Orshot MCP server (OAuth, no key) or REST: OG images, social media posts, carousels, thumbnails, ad creatives, certificates, invoices, video with animations, Smart Resize, batch renders, tweet and website screenshots, and scheduling or posting to Instagram, LinkedIn, X, TikTok, Facebook, Pinterest and 7 more." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher orshot · joined 1 days agoInstalls 45Last detonated 31 h ago

$npx skills add orshot

Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packagereferences/integrations-and-errors.md:9 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Prompting user to enter sensitive credentialsSKILL.md:93 · Prompting user to enter sensitive credentials — social engineering

AST03