Image Craft
AdvisoryAudited by Static analysis on May 6, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
NoteHigh Confidence
ASI07: Insecure Inter-Agent CommunicationWhat this means
Personal or sensitive images supplied to the skill may be processed by image-analysis or image-generation tooling.
Why it was flagged
The skill may send user-provided reference images into image understanding and generation tools. This is expected for the stated purpose, but users should notice the data flow.
Skill content
If a reference image exists, use `images_understand` to extract features ... If a reference image exists, include it in `reference_files`
Recommendation
Only provide images you are comfortable having processed for generation, and avoid uploading sensitive documents, private IDs, or images containing confidential information.