creativeclaw — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited creativeclaw (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The unified AI media studio. Generates images, videos, speech, and branded graphics through one MCP server with 40 tools and one shared asset library. This skill is the single source of truth for every workflow — the MCP server provides the tools, this skill provides the knowledge.
The Creative Claw MCP server must be connected. If generate_image, render_html_image, get_theme etc. aren't available, install:
/plugin install creative-claw@creative-claw-marketplaceOr connect the MCP directly: https://app.creativeclaw.co/mcp
get_theme before any branded work. No theme + branded request → run the brand-theme workflow before generating.generate_image or generate_video for branded work without an image_url anchor — without it, models drift off-brand regardless of prompt quality.generate_video and render_html_video return job IDs. Always poll check_job. Never claim a result without status === "completed".update_asset) so future-you can find it (search_assets).inline_images — substituted as data URIs through the SSRF-guarded cache. CORS, redirects, and expired CDN URLs are the #1 cause of broken renders.generate_video, render_html_video, generate_3d_model, transcribe all return { jobId, status: "queued" }. Poll until completion. See references/async-jobs.md./hyperframes (and /hyperframes-cli for local commands). Creative Claw provides the cloud renderer (render_html_video) and reusable templates (create_template / render_template) — the composition rules are owned by the HyperFrames skill./video-use. Use individual MCP tools (transcribe, trim_video, add_subtitles, etc.) only for one-shot ops.name and tags to every generate_* / render_* call. Use update_asset after if you forgot.get_credits_balance for the user's balance. Hand them get_credits_link for top-up — you cannot complete checkout for them.generate_image / generate_video rewrite prompts server-side by default. When your prompt already contains literal control tokens (@Image1 / @Audio1 mention tags, exact timecodes, quoted dialogue, per-panel layout), disable the rewriter — paraphrasing @Image1 into "the reference image" silently breaks the model's syntax. Keep it on only for short, loose, single-line creative asks. Send it verbatim when you've done the directing; let the server direct when you haven't.| User wants… | Read first |
|---|---|
| Orientation / "what can this do?" | references/workflows/onboard.md |
| Generate or edit an AI image | references/workflows/image-gen.md |
| Generate or edit an AI video | references/workflows/video-gen.md |
| Storyboard a video, then generate it (board → iterate → Seedance) | references/workflows/storyboard-to-video.md |
| Voiceover / TTS / voice cloning | references/workflows/video-gen.md (audio section) |
| Branded HTML → PNG (one-off banner / OG / card) | references/workflows/html-image.md + references/platform-dimensions.md |
| Create a new template (HTML or AI-image, with refs + iteration loop) | references/workflows/template-creation.md |
| Reusable banner template (deeper HTML template mechanics) | references/workflows/banner-from-template.md |
| Code-driven branded video (HyperFrames) | references/workflows/code-video-hyperframes.md → install /hyperframes |
| Brand theme (create / extract / update / apply) | references/workflows/brand-theme.md |
| Edit existing footage (cut / grade / subtitle / reframe) | references/workflows/edit-video.md → install /video-use |
When the user's request matches a row, read that file before doing anything. The workflow files contain the model selection, prompting strategies, parameter sets, and anti-patterns that aren't reproduced here.
references/workflows/)nano-banana-pro) → iterate by editing → extract CLEAN keyframes → hand off to Seedance 2.0 (@Image/@Audio refs, first/last frame, optional voice reference). Includes the "review board vs. generation frames" rule and when to disable the prompt rewriter.render_html_image deep dive. Full CSS surface, inline_images, fonts, dimensions, theme integration, when to use vs. AI gen.import_media drop-in), analysis, minimal dynamic params, render → load → iterate loop, prompt recipes for AI-generated background images inside HTML templates, "render one now" handoff.create_template parameter shape, batch rendering, the four templates worth building first.render_html_video and templates fit into a HyperFrames pipeline. Composition rules themselves live in the /hyperframes skill — install it before authoring./video-use skill plus a list of the MCP tools available for one-shot edits (transcribe, trim_video, add_subtitles, etc.).Per-modality picker tables live inside the workflow files (image-gen.md, video-gen.md). The MCP server enhances user prompts server-side using per-model knowledge — write clear creative direction and the server tailors it for the chosen model. Use list_models and get_model_params at runtime to discover model IDs and extras.
references/)check_job polling pattern, parallel jobs, failure modes, timeouts.assets/platform-dimensions.json.assets/)Full details and grouping in references/tool-catalog.md. Common ones:
Generate — generate_image, generate_video, generate_speech, render_html_image, render_html_video, render_template, compare_models Edit — remove_background, upscale_media, trim_video, scale_video, add_subtitles, extract_frames, merge_media, transcribe Brand — get_theme, list_themes, update_theme Templates — create_template, render_template, list_templates, update_template Assets — search_assets, update_asset, upload_asset, import_media, load_image Jobs — check_job (poll all async generations) Credits — get_credits_balance, get_credits_link
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.