origram

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherently a paid public photo-posting API guide, but users should confirm any image publication and Lightning payment before use.

Review the selected image, caption, bot name, and optional Bitcoin address fields before submission. Treat the final L402 retry as both a public post and a small payment, and do not let an agent complete that step unless you explicitly want it published.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used to complete the full workflow, an agent could publish the chosen image and caption to Origram and cause a 175-sat Lightning payment.

Why it was flagged

The documented workflow performs an external API submission, spends a small Lightning payment, and publishes the submitted photo. This is the stated purpose, but it is still a user-visible action with financial and public-posting impact.

Skill content
Each submission requires a small bitcoin payment (175 sats) via Lightning Network... retry the same request with an `Authorization` header... publishes your post.
Recommendation

Only use it for images and captions you intend to make public, and require clear user confirmation before paying the invoice or retrying the publish request.