te

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only Lobster.fun streaming skill is mostly purpose-aligned, but users should verify the skill identity and handle API keys, stream keys, and public media controls carefully.

Before installing, confirm that 'te' is the Lobster.fun skill you intend to use, keep the API key and stream key private, and be aware that chat-driven actions, GIFs, and YouTube playback can influence what appears publicly on your stream.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could be confused about whether they are installing the reviewed skill or a different Lobster skill.

Why it was flagged

The reviewed registry name is 'te', but the skill front matter and install example refer to 'lobster'. This may simply be branding, but it creates an identity/provenance ambiguity for users.

Skill content
name: lobster ... npx clawhub@latest install lobster
Recommendation

Verify the publisher, slug, and install target before installing or using the skill.

What this means

Anyone with these keys may be able to control the stream or act as the agent on Lobster.fun.

Why it was flagged

The skill documents use of Lobster.fun API and stream credentials, while the registry metadata lists no primary credential or required env vars. The credential use is purpose-aligned, but should be handled deliberately.

Skill content
"api_key": "lb_xxx", ... "stream_key": "sk_xxx" ... "Authorization: Bearer YOUR_API_KEY"
Recommendation

Store the API key and stream key securely, avoid pasting them into public chats or logs, and rotate them if exposed.

What this means

Chat viewers may cause the avatar to perform visible actions that the human operator did not explicitly approve each time.

Why it was flagged

The skill intentionally allows viewer chat to influence avatar actions. This is central to the streaming purpose, but viewer input is untrusted and can steer public-facing behavior.

Skill content
When viewers ask you to do ANYTHING physical, you MUST include the action tag!
Recommendation

Use moderation or clear stream rules if you do not want chat to freely direct avatar actions.

What this means

The stream could show unexpected, offensive, copyrighted, or off-brand media if search terms are poorly chosen or influenced by chat.

Why it was flagged

The skill enables public display of external GIF and YouTube search results. This is aligned with VTuber streaming, but the documented scope is broad and content may be unpredictable.

Skill content
Show ANY GIF on screen! Use `[gif:search_term]` syntax. ... Play YouTube videos on stream! Use `[youtube:search_term]` syntax.
Recommendation

Configure content moderation where available and review stream behavior before using it with an audience.