Meme Analyst
v1.1.0Use when a user sends you an image, meme, screenshot, or asks you to explain a joke or meme. Also used during cron meme ingestion from Telegram channels. Dec...
⭐ 0· 618·3 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description (meme explanation, channel ingestion) align with its instructions to decompose images and research references. The only small mismatch is that the registry metadata requires curl and jq even though SKILL.md describes using generic web_search and does not explicitly instruct use of those binaries — plausible but slightly disproportionate.
Instruction Scope
SKILL.md stays focused on meme analysis: decomposing visual/text layers, researching references (in original language), classifying humor mechanisms, and synthesizing an explanation. It does not instruct reading unrelated files, environment variables, or other skills' configs. The explicit directive to web_search every reference is broad but consistent with the stated purpose.
Install Mechanism
No install spec and no code files — instruction-only skills are low-risk because they don't drop code to disk. There are no download URLs or package installs to review.
Credentials
The skill requests no environment variables, secrets, or config paths. Its stated operations (web searches, image decomposition) don't require credentials in the bundle; mention of Telegram ingestion is plausible for a consumer of images but the skill does not request Telegram tokens itself.
Persistence & Privilege
always is false and the skill is user-invocable. It requests no persistent system-wide privileges or the ability to modify other skills' configs. Autonomous invocation (model invocation enabled) is the platform default and not itself a concern here.
Assessment
This skill appears to do what it says: analyze and research memes. Before installing, consider: 1) Confirm why the metadata lists curl and jq (are they actually used by your runtime?) — if not needed, remove the requirement to reduce attack surface. 2) The skill will perform web searches for cultural references; decide whether that external network activity and possible queries containing meme text or image-derived descriptions are acceptable for your privacy/security posture. 3) If you plan to run cron ingestion from Telegram, verify how Telegram messages/images are delivered to the agent and where credentials/tokens are stored (the skill itself doesn't request them). 4) If you have concerns about analyzing politically sensitive or extremist imagery, set content moderation/usage policies accordingly. Overall this bundle is coherent and low-risk, but double-check the curl/jq requirement and the data flow for channel ingestion.Like a lobster shell, security has layers — review code before you run it.
latestvk974jm2x5v32dgrrvse981r1dh818y8s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
M Clawdis
Binscurl, jq