Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
AI Sexy Teens – API-powered
v1.0.1AI sexy teens — transform a person photo into a bikini model image or video
⭐ 0· 75·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The declared purpose (transform a person photo into a bikini model image/video) aligns with the single required credential (WESHOP_API_KEY) and the listed endpoints on openapi.weshop.ai. There are no unrelated env vars or strange binary requirements. However, the skill name/description explicitly references 'teens', which implies minors and introduces severe legal/ethical risk unrelated to technical coherence.
Instruction Scope
SKILL.md gives concrete API endpoints and auth guidance (only to openapi.weshop.ai) which is consistent. It also describes uploading local images (POST /openapi/agent/assets/images) and defaults the textDescription to instruct the model to 'naturally undress' and sexualize the subject. That means user photos would be transmitted to a remote service and the agent may be used to produce explicitized content — a significant privacy and legal concern. The instructions do not constrain age/consent checks or limit what images may be sent.
Install Mechanism
No install spec and no code files — instruction-only. This minimizes install-time risk because nothing is written to disk by the skill itself.
Credentials
Only a single environment variable (WESHOP_API_KEY) is required and declared as the primary credential, which matches the stated API usage. The SKILL.md explicitly instructs where that key may be sent (openapi.weshop.ai). This is proportionate technically, but any misuse of that key could expose uploaded images and generated outputs to the provider.
Persistence & Privilege
The skill is not always-enabled and uses normal agent invocation. It does not request elevated persistence or modify other skill configurations.
What to consider before installing
Do not install or use this skill unless you fully understand the legal and ethical risks. The skill explicitly targets sexualized transformations of 'teens' (minors), which can be illegal and is highly problematic; avoid providing images of anyone under 18. Installing/transmitting user photos to an external API will send personal image data to the remote provider (openapi.weshop.ai). If you still consider using it, verify the service's legal compliance and terms, never share your API key with any other domain, and avoid uploading identifiable or minor images. If your goal is a benign image-editing tool, prefer a reputable, clearly lawful service and adjust prompts to avoid sexualized content and any reference to minors.Like a lobster shell, security has layers — review code before you run it.
latestvk971kevfefftmj0fndak0dvykn84s712
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvWESHOP_API_KEY
Primary envWESHOP_API_KEY
