Quotly Style Sticker
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears purpose-aligned for generating quote stickers, but users should know it sends selected message/profile data to an external QuotLy API and may auto-deliver the generated media.
Before installing, make sure you are comfortable sending selected forwarded or quoted messages, names, and avatar/status data to the QuotLy API endpoint. For private chats or sensitive groups, restrict the API host with QUOTLY_API_ALLOW_HOSTS and require clear user selection before auto-sending the generated sticker.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Selected messages, names, and avatar/status data may be sent outside the chat platform to the configured QuotLy API.
The skill explicitly transfers selected chat content to an outside rendering service, which is expected for this workflow but relevant for privacy.
This skill sends message content to an external API to generate stickers.
Use the skill only for messages you are comfortable sending to the external service; in sensitive environments, set QUOTLY_API_ALLOW_HOSTS and avoid passing sensitive avatar/status URLs or base64 data.
The generated sticker may be sent as media without an accompanying explanation or preview text.
The instructions route the generated media directly to delivery and suppress normal assistant text; this is purpose-aligned for sticker auto-send but affects user visibility.
Use tool-emitted `MEDIA:` for delivery. Final assistant text must be empty.
Invoke it only when the user has clearly selected or quoted messages for sticker creation, and consider a confirmation step before posting in sensitive or public groups.