Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Skillboss

Swiss-knife for AI agents. 50+ models for image generation, video generation, text-to-speech, speech-to-text, music, chat, web search, document parsing, emai...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 121 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description claim an aggregator for many models and the skill only requires a single SKILLBOSS_API_KEY to call a central API (api.heybossai.com). The requested credential and the provided curl examples align with that purpose; there are no unrelated environment variables, binaries, or config paths.
Instruction Scope
SKILL.md instructions are limited to POSTing JSON (including the SKILLBOSS_API_KEY) to the heybossai API and optionally downloading returned media URLs. That stays within the stated scope. One minor note: the frontmatter lists allowed-tools: Bash, Read — the instructions do not ask to read system secrets, but if the agent uses the Read tool it could be used to collect local files for upload (e.g., base64 audio). This is not required by the skill but is a capability to be aware of.
Install Mechanism
No install spec or code files — instruction-only. Nothing is downloaded or written to disk by the skill itself, which minimizes install-time risk.
Credentials
Only a single credential (SKILLBOSS_API_KEY) is required and is the declared primary credential. That is proportionate for a centralized aggregator API. No unrelated secrets or multiple credentials are requested.
Persistence & Privilege
always is false and the skill can be invoked by the agent (default behavior). The skill does not request persistent system-level presence or modify other skills/config; this is proportionate.
Assessment
This skill appears internally consistent, but it routes all requests and (potentially) file uploads to api.heybossai.com. Only provide an API key to services you trust. Before installing or using: (1) confirm the legitimacy of heybossai (no homepage/source is provided), (2) avoid sending sensitive data or credentials to the service, (3) if you must upload files, test with non-sensitive samples first, and (4) give the key least privilege and plan to rotate it if exposed.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk97ewdbr4y98wst17b7wwen69h82qw3z

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

EnvSKILLBOSS_API_KEY
Primary envSKILLBOSS_API_KEY

SKILL.md

SkillBoss

One API key, 50+ models across providers (Bedrock, OpenAI, Vertex, ElevenLabs, Replicate, Minimax, and more). Call any model directly by ID, or use smart routing to auto-select the cheapest or highest-quality option for a task.

Base URL: https://api.heybossai.com/v1

List Models

curl -s -X POST https://api.heybossai.com/v1/models \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\"}"

Filter by type:

curl -s -X POST https://api.heybossai.com/v1/models \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"types\":\"image\"}"

Types: chat, image, video, tts, stt, music, search, tools

Smart Mode (auto-select best model)

List available task types:

curl -s -X POST https://api.heybossai.com/v1/pilot \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"discover\":true}"

Run a task (auto-selects best model):

curl -s -X POST https://api.heybossai.com/v1/pilot \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"type\":\"image\",\"inputs\":{\"prompt\":\"A sunset over mountains\"}}"

Chat

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"bedrock/claude-4-5-sonnet\",\"inputs\":{\"messages\":[{\"role\":\"user\",\"content\":\"Explain quantum computing\"}]}}"
ParameterDescription
modelbedrock/claude-4-5-sonnet, bedrock/claude-4-6-opus, openai/gpt-5, vertex/gemini-2.5-flash, deepseek/deepseek-chat
inputs.messagesArray of {role, content} objects
inputs.systemOptional system prompt string
inputs.temperatureOptional, 0.0–1.0
inputs.max_tokensOptional, max output tokens

Response: choices[0].message.content or content[0].text

Image Generation

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"mm/img\",\"inputs\":{\"prompt\":\"A sunset over mountains\"}}"

Save to file:

URL=$(curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"mm/img\",\"inputs\":{\"prompt\":\"A sunset over mountains\"}}" \
  | grep -o '"image_url":"[^"]*"' | cut -d'"' -f4)
curl -sL "$URL" -o sunset.png
ParameterDescription
modelmm/img, replicate/black-forest-labs/flux-2-pro, replicate/black-forest-labs/flux-1.1-pro-ultra, vertex/gemini-2.5-flash-image-preview, vertex/gemini-3-pro-image-preview
inputs.promptText description of the image
inputs.sizeOptional, e.g. "1024*768"
inputs.aspect_ratioOptional, e.g. "16:9"

Response: image_url, data[0], or generated_images[0]

Video Generation

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"mm/t2v\",\"inputs\":{\"prompt\":\"A cat playing with yarn\"}}"

Image-to-video:

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"mm/i2v\",\"inputs\":{\"prompt\":\"Zoom in slowly\",\"image\":\"https://example.com/photo.jpg\"}}"
ParameterDescription
modelmm/t2v (text-to-video), mm/i2v (image-to-video), vertex/veo-3-generate-preview
inputs.promptText description
inputs.imageImage URL (for i2v)
inputs.durationOptional, seconds

Response: video_url

Text-to-Speech

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"minimax/speech-01-turbo\",\"inputs\":{\"text\":\"Hello world\",\"input\":\"Hello world\",\"voice\":\"alloy\"}}"
ParameterDescription
modelminimax/speech-01-turbo, elevenlabs/eleven_multilingual_v2, openai/tts-1
inputs.textText to speak
inputs.voiceVoice name (e.g. alloy, nova, shimmer)
inputs.voice_idVoice ID (for ElevenLabs)

Response: audio_url or binary audio data

Speech-to-Text

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"openai/whisper-1\",\"inputs\":{\"audio_data\":\"BASE64_AUDIO\",\"filename\":\"recording.mp3\"}}"
ParameterDescription
modelopenai/whisper-1
inputs.audio_dataBase64-encoded audio
inputs.filenameOriginal filename with extension

Response: text

Music Generation

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"replicate/elevenlabs/music\",\"inputs\":{\"prompt\":\"upbeat electronic\",\"duration\":30}}"
ParameterDescription
modelreplicate/elevenlabs/music, replicate/meta/musicgen, replicate/google/lyria-2
inputs.promptMusic description
inputs.durationDuration in seconds

Response: audio_url

Background Removal

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"replicate/remove-bg\",\"inputs\":{\"image\":\"https://example.com/photo.jpg\"}}"
ParameterDescription
modelreplicate/remove-bg, replicate/background-remover
inputs.imageImage URL

Response: image_url or data[0]

Document Processing

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"reducto/parse\",\"inputs\":{\"document_url\":\"https://example.com/file.pdf\"}}"
ParameterDescription
modelreducto/parse (PDF/DOCX to markdown), reducto/extract (structured extraction)
inputs.document_urlURL of the document
inputs.instructionsFor extract: {"schema": {...}} JSON schema

Response: result (parsed content)

Web Search

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"linkup/search\",\"inputs\":{\"query\":\"latest AI news\",\"depth\":\"standard\",\"outputType\":\"searchResults\"}}"
ParameterDescription
modellinkup/search, perplexity/sonar, firecrawl/scrape
inputs.querySearch query
inputs.depthstandard or deep
inputs.outputTypesearchResults, sourcedAnswer, structured

Email

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"email/send\",\"inputs\":{\"to\":\"user@example.com\",\"subject\":\"Hello\",\"html\":\"<p>Hi there</p>\"}}"

SMS Verification

Send OTP:

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"prelude/verify-send\",\"inputs\":{\"target\":{\"type\":\"phone_number\",\"value\":\"+1234567890\"}}}"

Verify OTP:

curl -s -X POST https://api.heybossai.com/v1/run \
  -H "Content-Type: application/json" \
  -d "{\"api_key\":\"$SKILLBOSS_API_KEY\",\"model\":\"prelude/verify-check\",\"inputs\":{\"target\":{\"type\":\"phone_number\",\"value\":\"+1234567890\"},\"code\":\"123456\"}}"

Available Models (50+)

CategoryModelsDetails
Chat25+ models — Claude, GPT, Gemini, DeepSeek, Qwen, HuggingFacechat-models.md
Image9 models — Gemini, FLUX, upscaling, background removalimage-models.md
Video3 models — Veo, text-to-video, image-to-videovideo-models.md
Audio11 models — TTS, STT, music generationaudio-models.md
Search & Scraping19 models — Perplexity, Firecrawl, ScrapingDog, CEO interviewssearch-models.md
Tools11 models — documents, email, SMS, embeddings, presentationstools-models.md

Notes:

  • Get SKILLBOSS_API_KEY at https://www.skillboss.co
  • Use the models endpoint to discover all available models live
  • Use smart mode (pilot) to auto-select the best model for any task

Files

7 total
Select a file
Select a file to preview.

Comments

Loading comments…