Smart Meme Generator

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is coherent for meme generation, but it sends captions to Imgflip and uses a bundled default Imgflip account unless the user sets their own credentials.

Install only if you are comfortable with meme captions being sent to Imgflip and hosted as shareable images. For better account control, set your own IMGFLIP_USER and IMGFLIP_PASS instead of relying on the bundled default account.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Any captions used to generate a meme leave the local environment and are processed by Imgflip; the resulting image URL is intended to be shareable.

Why it was flagged

The script submits meme template data and user/agent-generated captions to Imgflip to create a hosted image URL.

Skill content
"https://api.imgflip.com/caption_image"
Recommendation

Avoid putting private, confidential, or sensitive information in meme captions, and make sure users understand that image generation uses an external service.

What this means

Generated memes may be associated with a shared Imgflip account, and the embedded credential can be seen and reused by anyone with the artifact.

Why it was flagged

If the user does not set their own Imgflip credentials, the script uses a bundled shared account password for API calls.

Skill content
username = os.environ.get("IMGFLIP_USER", "davememebot")
    password = os.environ.get("IMGFLIP_PASS", "DaveMakes3Memes!")
Recommendation

Use your own IMGFLIP_USER and IMGFLIP_PASS for predictable account ownership, and maintainers should avoid shipping shared hardcoded passwords.