WaveSpeedAI Image Upscaler
v1.0.0Upscale images to 2K, 4K, or 8K resolution using WaveSpeed AI's Image Upscaler. Takes an image URL and produces a higher-resolution version. Supports JPEG, P...
⭐ 0· 321·1 current·1 all-time
byC@chengzeyi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The SKILL.md describes a WaveSpeed image upscaler and requires a WAVESPEED_API_KEY and the 'wavespeed' JS client, but the registry metadata lists no required environment variables or dependencies and there is no source/homepage—this mismatch between declared metadata and required runtime artifacts is concerning.
Instruction Scope
Runtime instructions show code examples that upload local files (wavespeed.upload('/path/to/photo.png')) and call wavespeed.run, implying access to local filesystem and network to send images to an external service. The doc advises validating URLs, but does not constrain when or how the agent may read local files or obtain user consent, which is a privacy/permission surface to clarify.
Install Mechanism
There is no install spec and no code files—this is instruction-only, which minimizes install-time risk. However, the SKILL.md references an external 'wavespeed' client library without providing installation instructions or declaring it as a dependency.
Credentials
The instructions require a WAVESPEED_API_KEY (sensitive credential) but the skill metadata lists no required environment variables or primary credential. Requiring an API key is reasonable for this service, but it should be declared explicitly in metadata and justified; the omission is an inconsistency that could lead to accidental credential exposure or confusion.
Persistence & Privilege
The skill does not request persistent/always-on presence, does not modify other skills' configs, and has no special OS restrictions—no elevated persistence privileges are requested.
What to consider before installing
This skill appears to do what it says (upscale images via WaveSpeed) but has metadata/instruction mismatches you should resolve before installing. Ask the publisher for: (1) explicit declaration of required env vars (WAVESPEED_API_KEY) in the skill metadata, (2) a source or homepage and the official package/dependency name and install instructions for the 'wavespeed' client, and (3) clarification about how the agent will access local files and whether images are sent to an external service (privacy/sensitivity implications). Until those are clarified, avoid providing real or sensitive images or hardcoding your API key; test with dummy images and use a dedicated service key with limited scope and billing controls.Like a lobster shell, security has layers — review code before you run it.
latestvk9775tpkyfmfxw8xmc3mk9ycvs825d60
License
MIT-0
Free to use, modify, and redistribute. No attribution required.