Image Handler
v1.0.0Read, analyze metadata, convert formats, resize, rotate, crop, compress, and batch process PNG, JPG, GIF, WebP, TIFF, BMP, HEIC, SVG, and ICO images.
⭐ 0· 1.1k·5 current·5 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (image read/convert/resize/etc.) matches the included scripts and SKILL.md examples. The scripts perform local file conversions, metadata extraction, and batch processing as advertised.
Instruction Scope
Instructions and scripts operate on local image files and reference only local commands (sips, ffmpeg, standard shell tools). Minor issues: SKILL.md includes example invocation paths rooted at ~/Dropbox/jarvis/skills/... which are just usage examples and not required by the scripts; SKILL.md references sips/ffmpeg but required-binaries metadata is empty (see install_mechanism). There are no instructions to read unrelated system files, transmit data externally, or access credentials.
Install Mechanism
No install spec (instruction-only plus bundled scripts). This is the lowest-risk install model. The scripts will be written to disk when the skill is installed, which is expected. There are no downloads from arbitrary URLs or archive extraction steps.
Credentials
The skill declares no required environment variables or credentials, which is appropriate. One small inconsistency: SKILL.md expects sips (macOS) and optionally ffmpeg to be available, but the registry metadata does not list required binaries—users should ensure those tools are present for full functionality.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or global agent configs, and does not store credentials. It runs only when invoked.
Assessment
This skill appears to do only local image processing and does not request secrets or network access. Before installing: 1) Confirm you have the needed tools (sips is macOS-only; ffmpeg is optional for WebP/HEIC/animated GIFs). 2) Review and run the scripts on non-sensitive test images first — image-processing binaries like ffmpeg/sips have historically had vulnerabilities, so avoid processing untrusted images on high-privilege hosts. 3) The SKILL.md examples reference a developer's ~/Dropbox path but the scripts themselves use relative/input arguments — you can move or invoke them from anywhere. If you need the skill to operate on remote images or to upload results, verify those steps separately because this skill does not implement network transfer or authentication.Like a lobster shell, security has layers — review code before you run it.
latestvk9712eq5bexfdhkccerfyaz8ah82ehcb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.