ClawHub

Didit Face Match

v1.3.0

Integrate Didit Face Match standalone API to compare two facial images. Use when the user wants to compare faces, verify face identity, implement biometric c...

⭐ 0· 719·1 current·1 all-time
byDidit@rosasalberto
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description match the actual behavior: SKILL.md and scripts/match_faces.py both call https://verification.didit.me/v3/face-match/ and only require DIDIT_API_KEY. No unrelated credentials, binaries, or system paths are requested.
ℹ
Instruction Scope
Instructions and example code explicitly upload two images (user_image and ref_image) to Didit's face-match endpoint and expect results back. This is exactly the declared purpose. Important privacy/security note: the skill causes biometric images to be transmitted to a third-party API; SKILL.md also documents account creation (email/password) and default behavior to save API requests in the Business Console. Those are expected for this functionality but are sensitive side-effects that users should consider.
✓
Install Mechanism
No install spec or downloaded code; the skill is instruction-only with a small helper script included. There are no remote downloads or archive extraction. The only operational dependency is the Python 'requests' library, which is used by the included script but not declared in metadata.
ℹ
Credentials
Only DIDIT_API_KEY is required (declared as primaryEnv), which is proportionate to calling Didit's API. Minor issue: the included Python script uses the 'requests' package but the skill metadata does not declare runtime dependencies; users need to ensure 'requests' is available. Also be aware that providing the API key grants the skill the ability to submit images and consume account credits.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or modify other skills. It does not write to system paths or attempt to enable itself automatically.
Assessment
This skill appears to do what it says: it uploads two images to Didit's face-match API and returns a similarity score. Before installing, consider: (1) privacy and legal: photos are biometric data — verify you have consent to upload them and check Didit's data retention/privacy policy; (2) API key safety: DIDIT_API_KEY gives the skill the ability to use your credits and access your Didit account — store and rotate it like any secret; (3) the included helper script requires the Python 'requests' library but dependencies are not declared by the skill—ensure your runtime has it; (4) note SKILL.md defaults (e.g., save_api_request=true) may cause requests/images to be stored in Didit's Business Console—change parameters if you need to avoid retention; (5) verify the listed endpoints (verification.didit.me / apx.didit.me) match the vendor you expect and confirm billing/charges if you plan to run at scale. If any of these are unacceptable, do not install or provision the API key.

Like a lobster shell, security has layers — review code before you run it.

latestvk976c2ddcam4zdey4qdey2scqd826grh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

👥 Clawdis
EnvDIDIT_API_KEY
Primary envDIDIT_API_KEY

Comments