ClawHub

Reverse Image Search

v1.0.4

Reverse image search — find where an image appears on the web, visually similar images, and what the image contains. Works with image URLs or uploaded image...

⭐ 0· 137·0 current·0 all-time
by@selvatuple
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name, description, required binary (curl), and required env var (SEARCHTHISIMAGE_API_KEY) align with performing reverse image lookups against an external API. Minor metadata mismatch: SKILL.md shows version 1.0.0 while registry lists 1.0.4, and the skill has no homepage/source URL, which reduces transparency but does not by itself indicate incoherence.
✓
Instruction Scope
SKILL.md instructs the agent only to POST either an image URL or an uploaded file to the declared API endpoint and to format the returned results for the user. The instructions explicitly limit actions to temporary file storage for uploads and do not request unrelated files, environment variables, or system configuration. The privacy statements in SKILL.md are unverified claims by the provider but are consistent with the skill's stated behavior.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files — lowest-risk install posture (nothing is written to disk beyond temporary upload handling as instructed).
✓
Credentials
Only one credential is required (SEARCHTHISIMAGE_API_KEY), which is appropriate for calling a third-party API. The SKILL.md uses that env var and does not reference other secrets or unrelated credentials.
✓
Persistence & Privilege
The skill is not forced-always (always:false), is user-invocable, and does not request persistent system changes or access to other skills' configs. Autonomous invocation (disable-model-invocation:false) is the platform default and not a concern by itself here.
Assessment
This skill appears coherent, but exercise caution before installing: the skill sends images to an external API (https://api.searchthisimage.com) and the package has no homepage or source listed. Verify the API provider (searchthisimage.com), review its privacy policy and terms, and ensure the SEARCHTHISIMAGE_API_KEY you supply is scoped and rotatable. Avoid sending sensitive or private images until you confirm the service's handling/retention practices. Test with non-sensitive images and monitor for unexpected network activity or errors.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cb7wvde4tqf99vzfcy52exd83hk9x

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔍 Clawdis
OSmacOS · Linux
Binscurl
EnvSEARCHTHISIMAGE_API_KEY

Comments