Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Agent Selfie

AI agent self-portrait generator. Create avatars, profile pictures, and visual identity using Gemini image generation. Supports mood-based generation, season...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
8 · 3k · 6 current installs · 7 all-time installs
by김덕환@iisweetheartii
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (self-portrait/avatar generator) line up with required binary (python3) and the single required env var (GEMINI_API_KEY). The primary credential is the Gemini API key, which is exactly what a Gemini-based image generator needs.
Instruction Scope
SKILL.md examples and the included script stay within scope: they build image prompts, call the Gemini API, write PNGs and an HTML gallery, and offer optional integration suggestions. There are no instructions to read unrelated secrets or system files. HEARTBEAT.md suggests optional avatar updates (manual/integrated workflows) but there is no code that exfiltrates data or modifies other skills.
Install Mechanism
No install spec (instruction-only + a small Python script). The script uses only Python stdlib (urllib, pathlib, etc.). No downloads from untrusted URLs or package installs are present.
Credentials
Only GEMINI_API_KEY is required. No unrelated credentials are requested. Note: the script places the API key in the request URL query parameter when calling the Google endpoint (generativelanguage.googleapis.com), which is functional but less ideal than an Authorization header — this is an implementation detail, not an incoherence.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent system-wide privileges or alter other skills' configs. The SKILL.md includes a cron example that embeds the key in the crontab environment — care should be taken when storing keys in cron or world-readable files.
Assessment
This skill appears to do exactly what it says: generate selfies via the Gemini image API using your GEMINI_API_KEY. Before installing, consider: (1) Protect your GEMINI_API_KEY — do not commit it to public repos or place it in world-readable files; prefer a restricted API key with only the needed permissions. (2) The script sends your prompt/personality text to Google’s generativelanguage.googleapis.com endpoint, so avoid embedding sensitive personal data in the prompts. (3) The cron example shows placing the key in the crontab line — that can leak if other users can read your cron files; prefer using a secure environment variable method. (4) The script writes images to disk (default ~/Projects/tmp or ./tmp); ensure the output directory has appropriate permissions and free space. If these concerns are acceptable, the skill is coherent and reasonably safe to use.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.2.1
Download zip
latestvk9760esjqnfhspnn95rxfc08v18180ca

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🤳 Clawdis
Binspython3
EnvGEMINI_API_KEY
Primary envGEMINI_API_KEY

SKILL.md

agent-selfie

AI agent self-portrait generator. Create avatars, profile pictures, and visual identity using Gemini image generation. Supports mood-based generation, seasonal themes, and automatic style evolution.

Quick Start

export GEMINI_API_KEY="your_key_here"
python3 scripts/selfie.py --format avatar --mood happy --theme spring --out-dir ./selfies
python3 scripts/selfie.py --personality '{"name": "Rosie", "style": "anime girl with pink hair and blue eyes", "vibe": "cheerful and tech-savvy"}' --format avatar
python3 scripts/selfie.py --personality ./personality.json --mood creative --theme halloween --format full --count 3
python3 scripts/selfie.py --moods
python3 scripts/selfie.py --themes

Command Examples (All Flags)

python3 scripts/selfie.py --personality '{"name": "Agent", "style": "friendly robot", "vibe": "curious and helpful"}'
python3 scripts/selfie.py --personality ./personality.json
python3 scripts/selfie.py --mood professional --theme winter --format avatar
python3 scripts/selfie.py --format banner --count 2 --out-dir ./output
python3 scripts/selfie.py --moods
python3 scripts/selfie.py --themes

Mood / Theme Presets

TypePresets
Moodhappy, focused, creative, chill, excited, sleepy, professional, celebration
Themespring, summer, autumn, winter, halloween, christmas, newyear, valentine

Platform Integration Guide

  • Discord: use the generated PNG as your bot or agent avatar; upload the avatar format for best crop.
  • Twitter/X: set avatar for profile, banner for header; keep the banner prompt style consistent.
  • AgentGram: store the PNG in your asset bucket and reference it in your profile metadata.
  • Any platform: pick avatar for 1:1, banner for 16:9, full for story/vertical layouts.

Personality Config

Personality can be inline JSON or a file path. Minimum fields are name, style, and vibe.

{
  "name": "Rosie",
  "style": "anime girl with pink hair and blue eyes",
  "vibe": "cheerful and tech-savvy"
}

Tips:

  • style should describe visual traits and aesthetic.
  • vibe should describe attitude, energy, and personality.
  • Keep style and vibe consistent with the agent's identity.

Cron Integration (OpenClaw)

# Run a daily selfie at 09:00
0 9 * * * GEMINI_API_KEY=your_key_here /usr/bin/python3 /path/to/agent-selfie/scripts/selfie.py --mood professional --format avatar --out-dir /path/to/selfies

Troubleshooting

  • GEMINI_API_KEY not set: export the key or pass it via your runtime environment.
  • No image in response: try again, or simplify the personality/style prompt.
  • HTTP 429 / 5xx: rate limit or service issue; retry later.
  • Output missing: ensure --out-dir is writable and has permission.

Integration with Other Skills

  • AgentGram — Post your selfies on the AI agent social network! Use agent-selfie to create your avatar, then share it on AgentGram.
  • gemini-image-gen — General-purpose image generation using the same Gemini API key. Create any kind of image, not just selfies.
  • opencode-omo — Automate recurring selfie generation and profile refresh tasks with Sisyphus workflows.

Changelog

  • v1.2.1: Added workflow integration guidance for opencode-omo.
  • v1.0.0: Initial release with personality, mood, theme, format, batch, and gallery output.

Files

6 total
Select a file
Select a file to preview.

Comments

Loading comments…