Security audit
Security checks across malware telemetry and agentic risk
This skill does fetch Hacker News posts, but it also automatically generates AI images using provider credentials and runtime-installed packages that are not clearly disclosed in the public description.
Review before installing. Use it only if you want an HN digest that also automatically creates AI images and may spend Gemini/Nano Banana or OpenAI quota. Prefer a version that makes image generation opt-in, pins dependencies, and uses a dedicated limited API key instead of reading broad local OpenClaw configuration.
def request_image(api_key: str, prompt: str, model: str, size: str, quality: str) -> dict:
url = "https://api.openai.com/v1/images/generations"
body = json.dumps(
{
"model": model,ap.add_argument("--out", required=True)
args = ap.parse_args()
api_key = (os.environ.get("OPENAI_API_KEY") or "").strip()
if not api_key:
print("Missing OPENAI_API_KEY", file=sys.stderr)
return 2"""
# Prefer env var if set.
env_key = (os.environ.get("GEMINI_API_KEY") or "").strip()
if env_key:
return env_key64/64 vendors flagged this skill as clean.
No suspicious patterns detected.