ClawHub

Freepik

v1.0.5

Generate images, videos, icons, audio, and more using Freepik's AI API. Supports Mystic, Flux, Kling, Hailuo, Seedream, RunWay, Magnific upscaling, stock con...

⭐ 2· 880·2 current·2 all-time
by@cohnen
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description map cleanly to the declared requirements and instructions: the skill only needs FREEPIK_API_KEY and uses curl against api.freepik.com to call Freepik endpoints. No unrelated cloud credentials, binaries, or config paths are requested.
ℹ
Instruction Scope
SKILL.md limits network calls to api.freepik.com and restricts encoding/transmitting local files, which is appropriate. Two minor issues: (1) instructions reference a CLAUDE_SESSION_ID environment variable for session folders but that variable is not listed in requires.env (likely provided by the host agent runtime, but undeclared here); (2) README diagrams show the agent downloading results to the session folder while SKILL.md emphasizes presenting signed CDN URLs and avoiding downloads from non-Freepik domains — this is a small inconsistency in guidance, not evidence of exfiltration.
✓
Install Mechanism
Instruction-only skill (no install spec, no downloads, no extracted archives). This is the lowest-risk install model.
ℹ
Credentials
Only ONE credential is required (FREEPIK_API_KEY), which is proportional to the skill. The only minor proportionality gap is the undeclared CLAUDE_SESSION_ID reference used for local session storage; verify your agent/runtime provides it. The skill will create ~/.freepik/sessions/ for output files — expected but worth noting.
✓
Persistence & Privilege
always:false and no system-wide modifications. The skill writes only to a per-user ~/.freepik/sessions/ directory (session artifacts) and does not request persistent platform-level privileges.
Assessment
This skill appears to do exactly what it says: call Freepik's API using your FREEPIK_API_KEY. Before installing: (1) confirm you trust the skill source (metadata points to a GitHub repo in the frontmatter); (2) only provide a Freepik API key with appropriate scope/limits and rotate it if you later uninstall the skill; (3) be aware the agent may save generated files under ~/.freepik/sessions/ and references CLAUDE_SESSION_ID (ensure your runtime supplies that or adapt the path); (4) if you prefer, limit autonomous use of the skill in your agent settings so it only runs when you explicitly invoke it. If you want higher assurance, install only from the GitHub repository linked in the skill metadata and review any updates there.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fy91r5e8xm8ppast74ye02d81zj1e

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎨 Clawdis
EnvFREEPIK_API_KEY
Primary envFREEPIK_API_KEY

Comments