I Love You Mom
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill matches its stated Mixtiles automation, but it can use a WhatsApp account to collect private family photos, upload selected photos externally, and send a chat message without an explicit confirmation step.
Install only if you intend the agent to access the specified WhatsApp group and upload selected photos to the Mixtiles/Cloudinary flow. Set MIXTILES_GROUP_JID and MIXTILES_SEND_TO carefully, review the dependent mixtiles-it script, avoid or control any monthly cron trigger, and add a manual confirmation step before uploading photos or sending the final link.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could post a generated Mixtiles link to a group or phone number using the user's WhatsApp account.
The workflow sends a WhatsApp message as part of the automated pipeline, with no explicit instruction to ask the user to review the selected photos, recipient, or cart link before sending.
wacli send text \ --to "$SEND_TO" \ --message "Your monthly tiles are ready!... $CART_URL"
Add a required confirmation step before sending, and restrict MIXTILES_SEND_TO to an explicitly approved recipient.
A configured run can access and download up to 100 recent images from the selected WhatsApp group.
The script uses wacli to search WhatsApp group messages, which requires delegated WhatsApp account access and can read private group media.
wacli messages search "*" --chat "$GROUP_JID" --type image --after "$AFTER_DATE" --limit 100 --json
Clearly document that the logged-in WhatsApp session is used, require an explicit group allowlist, and verify the group JID before running.
Private family photos may be uploaded outside WhatsApp/local storage to create the cart link.
Selected family photos are sent to an external provider, but the artifacts do not describe retention, access controls, deletion, or a final consent step.
This uploads each photo to Cloudinary and outputs a single Mixtiles cart URL with all photos.
Review the Cloudinary/Mixtiles upload behavior, add user confirmation before upload, and document retention/deletion expectations.
The actual code that uploads photos and builds the cart may come from an unreviewed or changed local dependency.
The skill dynamically locates and executes a script from another local skill that is not included or pinned in this package.
MIXTILES_CART_SCRIPT="$(find ~/.openclaw/workspace/skills/mixtiles-it/scripts -name 'mixtiles-cart.py')" python3 "$MIXTILES_CART_SCRIPT"
Declare and pin the mixtiles-it dependency, verify the script path resolves to the intended file, and review that script before using this automation.
If connected to an external schedule, the workflow could repeat monthly without a fresh manual prompt.
The skill is intended to support scheduled monthly operation, though the provided artifacts do not install a cron job themselves.
Use when it's time for the monthly Mixtiles order, when asked to "run the monthly tiles"... or on the monthly cron trigger.
Only attach it to a schedule if you want automatic monthly runs, and ensure scheduled runs still require review before upload and send.