Bing Wallpaper
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a simple wallpaper fetcher that makes a disclosed third-party API request, with only minor notes about the external source and undeclared curl dependency.
This looks safe for its stated purpose. Before installing, be aware it retrieves data from the third-party 60s.viki.moe service rather than directly from Microsoft/Bing, and make sure curl is available on the system.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The external API can see the request and controls the wallpaper link, markdown, JSON, or image data returned to the agent.
The script makes a network request to a fixed third-party API and returns its output. This is disclosed and aligned with the wallpaper purpose, but users should know the returned content comes from that external service.
API_URL="https://60s.viki.moe/v2/bing" ... curl -s "$API_URL"
Use when you are comfortable fetching the wallpaper from 60s.viki.moe, and treat returned links or markdown as external content.
The skill may fail on systems without curl, and the dependency may not be surfaced during installation.
The script depends on curl even though the registry metadata lists no required binaries. This may affect install/runtime expectations, but the dependency is visible in the script and directly supports the stated function.
curl -s "$API_URL"
Ensure curl is available before use, and maintainers should declare curl as a required binary.