Crop Image

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only image-cropping skill matches its stated purpose, but users should know it sends image URLs or uploaded image files to an external service.

This appears safe and purpose-aligned for routine image cropping. Before using it, make sure the images are appropriate to send to the external ImageClaw API, especially if they contain private, personal, or confidential content.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Images submitted for cropping, and image URLs sent for URL-based cropping, are shared with api.imageclaw.net; cropped results may be returned as externally hosted URLs.

Why it was flagged

This shows that local user-provided image files are uploaded to an external API service for cropping.

Skill content
curl -sS -X POST "https://api.imageclaw.net/crop/upload" \
  -F "file=@/absolute/path/to/photo.jpg"
Recommendation

Use this only for images you are comfortable sending to the external service, and verify the service's privacy and retention practices before using it with sensitive images.