Geepers Llm

PassAudited by ClawScan on May 1, 2026.

Overview

This is a disclosed, instruction-only integration for a third-party LLM API; users should notice that prompts, media, and an API key may be sent to dr.eamer.dev.

This skill appears coherent and purpose-aligned. Before installing, confirm you trust dr.eamer.dev, use a dedicated API key, and avoid sending confidential prompts, private images, or sensitive text unless you are comfortable with that external service processing them.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

If installed and used, the agent may authenticate requests to dr.eamer.dev using the user’s API key.

Why it was flagged

The skill uses an API key to authenticate to the external LLM service. This is expected for an API integration, but it is still credential-bearing access that users should handle carefully.

Skill content

Set your API key in an environment variable or pass it per-request:

export DREAMER_API_KEY=your_key_here

Recommendation

Use a dedicated, revocable API key if possible, avoid sharing it in prompts, and remove or rotate it if you no longer use the service.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Prompts, image references, and other request content may be visible to the dr.eamer.dev service and any downstream provider it uses.

Why it was flagged

The skill is designed to send prompts, image URLs, and text-to-speech content to an external API that may route to multiple model providers. This is purpose-aligned, but it creates an external data boundary.

Skill content

Access 12 LLM providers through a single unified API at `https://api.dr.eamer.dev`.

Recommendation

Do not send secrets, private files, or sensitive personal data unless you trust the service and its downstream provider handling.