Musecard
v1.2.0Generate hand-drawn style resonant quote cards combining emotional text and illustrations in selected or AI-chosen art styles for social media sharing.
⭐ 0· 53·0 current·0 all-time
byfslong@fslong520
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (create hand-drawn style quote cards) matches the SKILL.md: the instructions focus on choosing a style, producing short copy options, and generating copy+image-generation prompts. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions are narrowly scoped to composing art/formatting prompts and interacting with the user for copy selection. They do reference specific art styles (including named-artist style) and a preferred image model (gemini-3.1-flash-image-preview) and include model-specific flags (e.g. --ar, --v). This is expected for a prompt-engineering skill but is somewhat opinionated/vague about which image-generation capability is actually available; it does not instruct reading system files, env vars, or sending data to external endpoints.
Install Mechanism
No install spec or code files beyond SKILL.md and an example prompt. Instruction-only skills write nothing to disk and do not pull external code — lowest-risk install footprint.
Credentials
The skill requires no environment variables, secrets, or credentials. That matches its stated purpose; nothing disproportionate is requested.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request to modify other skills or system settings and does not request permanent presence.
Assessment
This skill appears coherent and low-risk from a security perspective because it is instruction-only and asks for no secrets or installs. Before installing or using: (1) verify whether your agent has the referenced image-generation capability (the SKILL.md names gemini-3.1-flash-image-preview and uses model flags that some engines ignore); (2) be aware the prompts reference specific artists/styles (e.g., "Jimmy Liao" or "Genshin-like"), which can raise copyright or content-policy concerns depending on the generator you use and how you publish images—review legal/ethical rules for generating/publishing artwork in those styles; (3) confirm generated images and embedded text do not contain sensitive or personally identifying information before sharing publicly. No evidence of credential exfiltration, obscure downloads, or unexpected system access was found.Like a lobster shell, security has layers — review code before you run it.
artvk97fpe7fk81nez8ck4yknmh05584rkpxemotional-quotevk97fpe7fk81nez8ck4yknmh05584rkpximage-generationvk97fpe7fk81nez8ck4yknmh05584rkpxlatestvk97fpe7fk81nez8ck4yknmh05584rkpxprompt-engineeringvk97fpe7fk81nez8ck4yknmh05584rkpxsocial-mediavk97fpe7fk81nez8ck4yknmh05584rkpx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
