Anime Image Downloader (Safebooru, Download Only)
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: safebooru-fetcher Version: 1.0.5 The skill is a legitimate utility for searching and downloading images from Safebooru using its public DAPI. The code in `safebooru.py` and `safebooru_fetcher.py` is well-structured, implements proper filename sanitization via `_safe_slug`, and includes rate-limiting to respect the provider's service. No evidence of data exfiltration, unauthorized network calls, or prompt injection was found; the instructions in `SKILL.md` actually serve to restrict the agent's scope to local downloads only.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can download files and use disk space in the selected output folder.
The skill performs external HTTP requests and writes the returned image bytes to local disk, which is exactly its stated purpose but is still a capability users should notice.
POST_DAPI = "https://safebooru.org/index.php?page=dapi&s=post&q=index&json=1" ... with open(out_path, "wb") as f: f.write(r.content)
Use modest download counts, review the output directory, and avoid pointing --out at sensitive system or project paths.
A later dependency version could behave differently from the version originally tested by the skill author.
The dependency is not pinned to an exact version, so future installs may resolve to different versions of the requests package.
requests>=2.28.0
Install in a virtual environment and consider pinning dependencies if you need reproducible or higher-assurance installs.