ClawHub

Turn a real photo into a custom anime-style avatar, Moments cover, or Twitter/X header.

v1.0.4

Say "Help me install this skill from https://clawhub.ai/shuminliu026/anime-social-portrait" to your local agent, then create anime-style avatars, covers, and...

⭐ 0· 98·0 current·0 all-time
byliuliu026@shuminliu026
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is an instruction-only integration that calls the mew.design image processing API to create anime-style avatars/headers from user photos. All declared behavior (prompt construction, style selection, API endpoint) matches that purpose and no unrelated services or credentials are requested.
ℹ
Instruction Scope
Instructions are narrowly scoped to asking the user for a mew.design API key, requesting an uploaded photo, building a prompt, and calling POST https://api.mew.design/open/api/image/process. One operational note: the SKILL.md tells the agent to ask for and then silently reuse a user-provided API key within the same thread (and to validate it when needed). That behavior is expected for this skill but means users are required to paste a secret API key into the chat.
✓
Install Mechanism
No install spec or code files are present; this is instruction-only and does not write code to disk or download third-party packages, which minimizes install risk.
ℹ
Credentials
The skill requests the user's mew.design API key at runtime (via chat) — this is proportional because the API key is required to call the stated endpoint. The skill does not request other environment variables, system config paths, or unrelated credentials.
✓
Persistence & Privilege
The skill is not force-included (always:false) and is user-invocable. It allows the agent to reuse a key within the conversation per its instructions; this is normal for a chat-driven API integration but users should be aware the key is provided in the chat context and may persist in conversation history depending on platform policies.
Assessment
This skill is coherent for its purpose, but it requires you to paste a mew.design API key into the chat. Only provide a key you trust and consider creating a dedicated or limited-scope key you can revoke later. Do not paste keys in public/shared conversations. Confirm the domain (api.mew.design) before sending secrets. If you are concerned about lingering keys in chat history, revoke or rotate the key in your mew.design account after use or ask the agent to delete the key from the conversation if the platform supports that.

Like a lobster shell, security has layers — review code before you run it.

anime-avatarvk97ehdnadzbwhvx5hn91k4krhs84nz3mlatestvk97abcyhhptkzvmngydrz120th84xz7dportrait-stylizationvk97dr1zv0jaxfhpy5wtyw1c0xn84me15

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments