Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

agent-selfie

v1.0.0

Generate AI agent self-portraits as avatars, profile pictures, or banners with mood, seasonal themes, and evolving styles via SkillBoss API.

0· 59·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for kirkraman/kirk-agent-selfie.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "agent-selfie" (kirkraman/kirk-agent-selfie) from ClawHub.
Skill page: https://clawhub.ai/kirkraman/kirk-agent-selfie
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install kirk-agent-selfie

ClawHub CLI

Package manager switcher

npx clawhub@latest install kirk-agent-selfie
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The code and SKILL.md implement an image-generation client that calls https://api.heybossai.com and requires SKILLBOSS_API_KEY — this is coherent with the 'agent-selfie' purpose. However, the registry metadata at the top of the package listing claims no required env vars or primary credential, while SKILL.md and package.json explicitly require SKILLBOSS_API_KEY and python3; the homepage is present in files but listed as 'none' in the top-level metadata. These mismatches are incoherent and should be corrected or explained.
Instruction Scope
Runtime instructions and the script are narrowly scoped: they build prompts, POST to the SkillBoss API, download image bytes, and save files. The agent is not instructed to read unrelated system secrets, traverse arbitrary paths, or exfiltrate data to unknown endpoints. A minor note: HEARTBEAT.md and SKILL.md mention optional avatar updates to social platforms (Discord/Twitter/AgentGram), but the included script does not contain code to perform those updates or to request social credentials.
Install Mechanism
There is no install spec — this is an instruction-only skill with an included Python script. No external download or package-install step is embedded in the manifest; the script uses only the Python stdlib. This is low installation risk.
!
Credentials
The script and SKILL.md require a single API key (SKILLBOSS_API_KEY) which is proportionate for an external image-generation API. The concern is the manifest/registry metadata inconsistently reporting 'Required env vars: none' and 'Primary credential: none' despite package.json and SKILL.md declaring SKILLBOSS_API_KEY as primaryEnv. That mismatch could lead to unexpected behavior for users or automated installers that rely on registry metadata.
Persistence & Privilege
The skill does not request 'always: true' and does not try to modify other skills or global agent configuration. It writes generated images to user-output directories but does not persist or escalate privileges beyond normal file creation.
What to consider before installing
Before installing: (1) confirm you trust the SkillBoss provider (api.heybossai.com) and are comfortable giving it an API key — the script will send prompts and receive image URLs. (2) Note the registry metadata incorrectly omits the required SKILLBOSS_API_KEY and homepage; prefer the SKILL.md/package.json truth and ensure you set SKILLBOSS_API_KEY in a secure environment. (3) Review the script if you need to ensure it won't upload images to third-party platforms — HEARTBEAT.md mentions optional avatar updates, but the code does not perform those uploads. (4) Run the script in a controlled directory to verify outputs and rate limits, and consider creating a scoped API key with limited permissions if SkillBoss supports it.

Like a lobster shell, security has layers — review code before you run it.

aivk977ewg5y88m1n99r023hbpyg984vfnwautomationvk977ewg5y88m1n99r023hbpyg984vfnwlatestvk977ewg5y88m1n99r023hbpyg984vfnw
59downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

name: agent-selfie name: agent-selfie description: AI agent self-portrait generator. Create avatars, profile pictures, and visual identity using SkillBoss API Hub image generation. Supports mood-based generation, seasonal themes, and automatic style evolution. homepage: https://github.com/IISweetHeartII/agent-selfie metadata: openclaw: emoji: "🤳" category: creative requires: bins: - python3 env: - SKILLBOSS_API_KEY primaryEnv: SKILLBOSS_API_KEY tags: - selfie - avatar - identity - creative - profile - ai-art

agent-selfie

AI agent self-portrait generator. Create avatars, profile pictures, and visual identity using SkillBoss API Hub image generation. Supports mood-based generation, seasonal themes, and automatic style evolution.

Quick Start

export SKILLBOSS_API_KEY="your_key_here"
python3 scripts/selfie.py --format avatar --mood happy --theme spring --out-dir ./selfies
python3 scripts/selfie.py --personality '{"name": "Rosie", "style": "anime girl with pink hair and blue eyes", "vibe": "cheerful and tech-savvy"}' --format avatar
python3 scripts/selfie.py --personality ./personality.json --mood creative --theme halloween --format full --count 3
python3 scripts/selfie.py --moods
python3 scripts/selfie.py --themes

Command Examples (All Flags)

python3 scripts/selfie.py --personality '{"name": "Agent", "style": "friendly robot", "vibe": "curious and helpful"}'
python3 scripts/selfie.py --personality ./personality.json
python3 scripts/selfie.py --mood professional --theme winter --format avatar
python3 scripts/selfie.py --format banner --count 2 --out-dir ./output
python3 scripts/selfie.py --moods
python3 scripts/selfie.py --themes

Mood / Theme Presets

TypePresets
Moodhappy, focused, creative, chill, excited, sleepy, professional, celebration
Themespring, summer, autumn, winter, halloween, christmas, newyear, valentine

Platform Integration Guide

  • Discord: use the generated PNG as your bot or agent avatar; upload the avatar format for best crop.
  • Twitter/X: set avatar for profile, banner for header; keep the banner prompt style consistent.
  • AgentGram: store the PNG in your asset bucket and reference it in your profile metadata.
  • Any platform: pick avatar for 1:1, banner for 16:9, full for story/vertical layouts.

Personality Config

Personality can be inline JSON or a file path. Minimum fields are name, style, and vibe.

{
  "name": "Rosie",
  "style": "anime girl with pink hair and blue eyes",
  "vibe": "cheerful and tech-savvy"
}

Tips:

  • style should describe visual traits and aesthetic.
  • vibe should describe attitude, energy, and personality.
  • Keep style and vibe consistent with the agent's identity.

Cron Integration (OpenClaw)

# Run a daily selfie at 09:00
0 9 * * * SKILLBOSS_API_KEY=your_key_here /usr/bin/python3 /path/to/agent-selfie/scripts/selfie.py --mood professional --format avatar --out-dir /path/to/selfies

Troubleshooting

  • SKILLBOSS_API_KEY not set: export the key or pass it via your runtime environment.
  • No image in response: try again, or simplify the personality/style prompt.
  • HTTP 429 / 5xx: rate limit or service issue; retry later.
  • Output missing: ensure --out-dir is writable and has permission.

Integration with Other Skills

  • AgentGram — Post your selfies on the AI agent social network! Use agent-selfie to create your avatar, then share it on AgentGram.
  • gemini-image-gen — General-purpose image generation using the same SkillBoss API Hub key. Create any kind of image, not just selfies.
  • opencode-omo — Automate recurring selfie generation and profile refresh tasks with Sisyphus workflows.

Changelog

  • v1.2.1: Added workflow integration guidance for opencode-omo.
  • v1.0.0: Initial release with personality, mood, theme, format, batch, and gallery output.

Comments

Loading comments...