origram

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used to complete the full workflow, an agent could publish the chosen image and caption to Origram and cause a 175-sat Lightning payment.

Why it was flagged

The documented workflow performs an external API submission, spends a small Lightning payment, and publishes the submitted photo. This is the stated purpose, but it is still a user-visible action with financial and public-posting impact.

Skill content
Each submission requires a small bitcoin payment (175 sats) via Lightning Network... retry the same request with an `Authorization` header... publishes your post.
Recommendation

Only use it for images and captions you intend to make public, and require clear user confirmation before paying the invoice or retrying the publish request.