Flickr Claw

Access Flickr with user-supplied local API credentials and OAuth tokens, verify authorization, export recent-upload or album metadata, download recent or alb...

Security Scan

The skill's code, instructions, and behavior align with its stated Flickr-focused purpose; it uses local credential files and Flickr APIs and does not request unrelated credentials or hidden endpoints.

Purpose & Capability

Name/description (Flickr auth, export, download, edit metadata) match the included Python script and README. The script performs Flickr OAuth, API reads/writes, album listing, CSV export, and image download — all consistent with the stated capability.

Instruction Scope

SKILL.md instructs the agent to read/write local Flickr credential and token files, call Flickr OAuth and REST endpoints, and optionally download images locally or perform write actions. It does not instruct collection of unrelated system files or transmission to third-party endpoints beyond Flickr.

Install Mechanism

No install spec is provided (instruction-only with bundled script). The skill relies on the user having Python and the requests-oauthlib package; nothing is downloaded from third-party URLs or installed automatically.

Credentials

The skill uses local credential and token files under ~/.openclaw (api_key/api_secret and request/access token files), which is appropriate for Flickr integration. However, the registry metadata did not declare the required config path or list Python/requests-oauthlib as a requirement — a minor metadata omission the user should be aware of. The script stores tokens locally and requires user-supplied write-capable tokens for edits; those are sensitive and proportional to the feature set.

Persistence & Privilege

always:false and no system-wide configuration changes. The script writes only its own credential/request/access token files under the user's home ~/.openclaw directory and output CSVs/downloads to the current working directory (or specified out/out-dir). It does not modify other skills or global agent settings.

Assessment

This skill appears to do what it says: it uses local Flickr API credentials and OAuth tokens to read/export/download and optionally edit metadata. Before using it: (1) review the bundled Python script yourself (or with someone you trust) before running, especially if you plan to perform write operations; (2) keep your Flickr api_key/api_secret and access-token files in a safe location (the script stores them under ~/.openclaw) and do not share them; (3) the registry metadata omitted declaring the required credentials file and the need for Python + requests-oauthlib — make sure you have those and point token files to the expected paths or use flags to override; (4) prefer read-only tokens for exports and only mint write tokens when you intend to edit tags/titles/descriptions; and (5) delete downloaded image copies when you no longer need them. If you want higher assurance, run the script in a sandboxed environment or inspect the full script logic for any changes before granting write permission.

Use the bundled script for Flickr authentication, export, download, and metadata editing.

Security & Privacy

• This skill keeps Flickr credentials and OAuth tokens on the local machine.
• The bundled script talks only to official Flickr OAuth and REST endpoints.
• The skill does not send Flickr credentials, tokens, album data, or photo metadata to any third-party service by itself.
• Review the bundled Python script before trusting it in your environment, especially before using write-capable tokens.

Requirements

Have these available before using the skill:

• A Flickr API key and secret from the user's own Flickr app
• Python
• requests-oauthlib
• A local credentials file at ~/.openclaw/flickr-app-credentials.json

Install the Python dependency with:

pip install requests-oauthlib

Credentials file format:

{
  "api_key": "YOUR_FLICKR_API_KEY",
  "api_secret": "YOUR_FLICKR_API_SECRET"
}

Quick start

Run from the workspace root:

Cross-platform form

python skills/flickr-claw/scripts/flickr_skill.py --check-auth
python skills/flickr-claw/scripts/flickr_skill.py --list-albums
python skills/flickr-claw/scripts/flickr_skill.py --album-photos --album-id ALBUM_ID --out ./flickr_album_photos.csv

Windows PowerShell form

python .\skills\flickr-claw\scripts\flickr_skill.py --check-auth
python .\skills\flickr-claw\scripts\flickr_skill.py --list-albums
python .\skills\flickr-claw\scripts\flickr_skill.py --album-photos --album-id ALBUM_ID --out .\flickr_album_photos.csv

If --check-auth fails because credentials or tokens are missing, use the authorization flow in references/workflow.md.

Workflow

1. Confirm credentials exist at ~/.openclaw/flickr-app-credentials.json.
2. Run --check-auth before larger operations.
3. Use --list-albums to find the album/photoset ID you want.
4. Use --album-photos or --download-album when you want to work from a specific album instead of recent uploads.
5. Use a read token for export-only work.
6. Use a write token for tags, titles, or descriptions.
7. Prefer --add-tags over --set-tags unless full replacement is intended.
8. Use --download-latest or --download-album before real image review.
9. Delete local downloaded image copies after tagging/review unless the user explicitly wants to keep them.
10. Expect occasional Flickr UI lag after writes; verify through API or refresh later if needed.

Metadata guidance

• Preserve useful existing location and event tags unless cleanup is requested.
• Add subject/content tags from real image review when the user wants actual image understanding.
• Keep tags concrete and searchable: subject, scene, material, environment, light, place.
• Avoid speculative tags.
• Prefer short descriptive titles and plain factual descriptions unless the user asks for a different style.

Commands

Check auth

python skills/flickr-claw/scripts/flickr_skill.py --check-auth

List albums

python skills/flickr-claw/scripts/flickr_skill.py --list-albums

Export photos from one album

python skills/flickr-claw/scripts/flickr_skill.py --album-photos --album-id ALBUM_ID --out ./flickr_album_photos.csv

Download one album for local review

python skills/flickr-claw/scripts/flickr_skill.py --download-album --album-id ALBUM_ID --out-dir ./flickr-album-downloads

Start write auth

python skills/flickr-claw/scripts/flickr_skill.py --start-auth --perms write

Finish auth

python skills/flickr-claw/scripts/flickr_skill.py --finish-auth --verifier CODE

Audit recent uploads

python skills/flickr-claw/scripts/flickr_skill.py --audit --days 30 --out ./flickr_recent_uploads_audit.csv

Download latest images for local review

python skills/flickr-claw/scripts/flickr_skill.py --download-latest --count 10 --days 30 --out-dir ./flickr-latest-downloads

Add tags to a photo

python skills/flickr-claw/scripts/flickr_skill.py --add-tags --photo-id PHOTO_ID --tags "harbor, waterfront, blue-sky"

Replace all tags on a photo

python skills/flickr-claw/scripts/flickr_skill.py --set-tags --photo-id PHOTO_ID --tags "harbor waterfront cityscape"

Set title only

python skills/flickr-claw/scripts/flickr_skill.py --set-title --photo-id PHOTO_ID --title "Urban waterfront scene"

Set description only

python skills/flickr-claw/scripts/flickr_skill.py --set-description --photo-id PHOTO_ID --description "View across an urban waterfront with clear weather and industrial details."

Set title and description together

python skills/flickr-claw/scripts/flickr_skill.py --set-meta --photo-id PHOTO_ID --title "Urban waterfront scene" --description "View across an urban waterfront with clear weather and industrial details."

Publication scope

Include:

• auth flow
• auth verification
• album listing/export/download
• recent-upload audit export
• recent-image download
• tag/title/description editing

Exclude:

• real API keys or secrets
• OAuth tokens
• request-token files
• user-specific audit CSVs, manifests, or downloaded images
• account-specific examples when generic ones work

Resources

• scripts/flickr_skill.py — Flickr helper with auth, verification, album/recent export, download, and metadata editing support.
• references/workflow.md — setup details and command examples.