image-hosting
v1.0.0Upload images to img402.dev and get a public URL. Free tier: 1MB max, 7-day retention, no auth. Use when the agent needs a hosted image URL — for sharing in messages, embedding in documents, posting to social platforms, or any context that requires a public link to an image file.
⭐ 6· 1.9k·21 current·22 all-time
by@rahulgi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (public image hosting) match the instructions: the SKILL.md shows curl commands to POST images to https://img402.dev/api/free and describes paid endpoints. Required binary (curl) is appropriate and proportional.
Instruction Scope
Instructions operate on local image files (read from provided paths) and upload them to an external CDN. This is expected for an image-hosting helper, but users should note that uploaded images become publicly accessible. The doc also mentions optional image tools (sips, ImageMagick) that are not required by the skill but are suggested for resizing.
Install Mechanism
No install spec and no code files (instruction-only) — lowest risk. The skill only requires curl to be present on PATH.
Credentials
No environment variables or credentials requested. Paid flow mentions an upload token obtained after a payment step, which is expected for a paid retention tier and not requested up-front by the skill.
Persistence & Privilege
always is false and the skill does not request persistent privileges or modify agent/system configs. Autonomous invocation is allowed (platform default) but not combined with any broad credentials or elevated privileges.
Assessment
This skill is coherent but consider privacy and trust: any file you upload becomes publicly accessible for the retention period (free tier: 7 days), so do not upload sensitive images. Verify you trust img402.dev (review their privacy/terms) before using. The free tier has a 1 MB size limit and 1,000 uploads/day; the SKILL.md suggests using sips/ImageMagick to resize images if needed. The paid flow refers to an external x402 payment/token process — treat that like any third‑party payment and verify legitimacy before paying. If you need long-term or private hosting, use a provider you control or a service with explicit access controls.Like a lobster shell, security has layers — review code before you run it.
apivk97f1wjk34nw1qnnh4enzw5ggd80yet1curlvk97f1wjk34nw1qnnh4enzw5ggd80yet1image-hostingvk97f1wjk34nw1qnnh4enzw5ggd80yet1imagesvk97f1wjk34nw1qnnh4enzw5ggd80yet1latestvk97f1wjk34nw1qnnh4enzw5ggd80yet1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binscurl
