Giggle Generation Image
ReviewAudited by ClawScan on May 1, 2026.
Overview
This appears to be a coherent Giggle image-generation integration, but it uses your Giggle API key, sends prompts or reference images to giggle.pro, and saves task IDs for later status checks.
Install this only if you trust giggle.pro and the skill publisher. Keep GIGGLE_API_KEY out of chat, avoid sensitive prompts or reference images unless you accept sending them to Giggle, keep signed result links private, and clear stored task IDs for sensitive generations.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A clear image request may cause the agent to submit a Giggle API task without asking for an extra confirmation, potentially using quota or paid credits.
The skill allows direct execution of the local Python wrapper once the request is clear. This is aligned with image generation, but users should understand it can submit remote generation jobs.
If the user has provided enough info, run the command directly.
Use the skill when you are comfortable with direct task submission, and ask the agent to confirm before high-volume or paid generations.
The skill can act against the Giggle account associated with the API key, including submitting and querying image-generation tasks.
The script reads the Giggle API key from the environment and sends it as the authentication header for giggle.pro API requests. This is expected for the service but is account-level credential use.
api_key = os.getenv("GIGGLE_API_KEY") ... "x-auth": api_keyOnly set GIGGLE_API_KEY if you trust this integration, avoid sharing the key in chat, and rotate or scope the key if Giggle supports that.
Any sensitive prompt text or reference image data you provide can leave your local environment and be processed by giggle.pro.
Prompts and any reference image URLs, base64 data, or asset IDs are included in payloads sent to the external giggle.pro API. This is necessary for image generation but may include private content.
BASE_URL = "https://giggle.pro" ... "reference_images": refs ... requests.post(url, headers=self.headers, json=payload, timeout=30)
Review Giggle's privacy terms before using sensitive images or prompts, and avoid sending confidential reference images unless you are comfortable with the provider handling them.
Past image-generation task references may remain available in agent memory across later interactions.
The skill instructs the agent to persist task IDs so it can check generation status later. The stored value is limited to task tracking and is purpose-aligned.
**Store task_id in memory** (`addMemory`): giggle-generation-image task_id: xxx
For sensitive image jobs, ask the agent not to store the task ID or clear the related memory after the task is complete.
Different environments may resolve to different requests versions over time.
The dependency is a standard HTTP library and is purpose-aligned, but the version is specified as a lower bound rather than an exact pinned version.
requests>=2.31.0
Use a trusted Python environment and pin dependencies if you need reproducible installation behavior.