ClawHub

Image Magic resizer

v1.0.0

Resize images using ImageMagick (CLI). Entrypoint is a Bash script.

⭐ 1· 1.6k·3 current·4 all-time
by@pr1vateer
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description ask for an ImageMagick-based resizer and the skill requires bash plus magick/convert and offers a brew install for imagemagick — these requirements match the stated purpose.
ℹ
Instruction Scope
The SKILL.md and scripts/resize.sh are straightforward: they validate argument count, check input exists, choose magick/convert, compute output path, create output dirs, and run ImageMagick. The script disallows a set of characters in the geometry string to reduce shell-injection risk. Note: ImageMagick historically has had vulnerabilities when processing untrusted image content (e.g., path/url/protocol handling), and the script does not sandbox processing or restrict output paths (it can overwrite arbitrary filesystem targets if the agent is allowed to write there). These are operational cautions rather than incoherence with purpose.
✓
Install Mechanism
Install spec uses Homebrew formula 'imagemagick', a standard package source that provides the expected binaries (magick, convert). This is a low-risk, proportionate install mechanism for the stated function.
✓
Credentials
No environment variables, credentials, or config paths are requested. The lack of secrets or unrelated env access is proportionate to a local CLI image-resize tool.
✓
Persistence & Privilege
Skill is user-invocable and not forced-always. It does not request persistent system-wide configuration or modify other skills. Autonomous invocation is allowed by default but is not combined with other red flags here.
Assessment
This skill appears to do exactly what it claims — a small Bash wrapper that calls ImageMagick. Before installing, consider: (1) ImageMagick has had vulnerabilities that can be triggered by specially crafted images — avoid processing untrusted images or run the tool in a sandbox/ephemeral container. (2) The script can create/overwrite output files and will create directories as needed, so ensure the agent's filesystem permissions limit where it can write. (3) Verify the system ImageMagick installation is up to date (brew formula is standard). If you need to process untrusted files, run this skill in a restricted environment (container, chroot, or VM) and audit ImageMagick's version/patch level.

Like a lobster shell, security has layers — review code before you run it.

latestvk973txx0f4dghgmqzq1n44sv1180kwk4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
Binsbash
Any binmagick, convert

Install

Install ImageMagick (brew)
Bins: magick, convert
brew install imagemagick

Comments