ClawHub

fal.ai

v1.0.0

fal.ai API integration with managed API key authentication. Run AI models for image generation, video generation, audio processing, and more. Use this skill...

⭐ 0· 229·0 current·0 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (fal.ai integration) align with the requested MATON_API_KEY and the documented gateway endpoints (gateway.maton.ai, ctrl.maton.ai). Requesting a single gateway API key is reasonable for a proxied fal.ai integration.
✓
Instruction Scope
SKILL.md contains only API usage examples and management endpoints (list/create/get/delete connections, submit/poll/cancel requests). It does not instruct reading arbitrary local files, scanning other env vars, or exfiltrating unrelated data.
✓
Install Mechanism
No install spec and no code files beyond SKILL.md/LICENSE — lowest-risk pattern for a skill. Nothing is downloaded or written to disk by the skill as published.
✓
Credentials
Only one required environment variable (MATON_API_KEY) is declared and used in examples. That key directly corresponds to the gateway authentication described; no unrelated credentials or config paths are requested.
✓
Persistence & Privilege
always is false and there is no indication the skill modifies other skills or system settings. Autonomous invocation is allowed (default) but not combined with other concerning factors.
Scan Findings in Context
[NO_STATIC_FINDINGS] expected: The repository is instruction-only (SKILL.md + LICENSE); the regex scanner had no code to analyze. This absence of findings is expected for an instruction-only skill but means runtime network interactions are the primary risk vector.
Assessment
This skill is internally consistent for a fal.ai gateway integration, but it relies on Maton (gateway.maton.ai / ctrl.maton.ai) — the MATON_API_KEY you provide will grant that gateway access to run models on your behalf. Before installing: (1) Ensure you trust Maton/maton.ai and understand their data/privacy and billing policies; (2) Use a key with appropriate scope/least privilege and avoid sharing high-privilege account keys; (3) Verify any URLs returned by the connection flow (connect.maton.ai/ctrl.maton.ai) before opening them in a browser; (4) Remember the skill is instruction-only and will make network calls — no local files are accessed by the skill itself. If you need tighter assurance, request the publisher's provenance or an official fal.ai/Maton SDK instead.

Like a lobster shell, security has layers — review code before you run it.

latestvk97964d6ewy8mxt8rhycarwkes82t768

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments