Gif Whatsapp
v1.3.0Search and send GIFs on WhatsApp. Handles the Tenor→MP4 conversion required for WhatsApp.
⭐ 2· 2.2k·2 current·2 all-time
byshaharsh@shaharsha
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the runtime instructions: gifgrep (search), curl (download), and ffmpeg (convert) are all appropriate for converting Tenor/Giphy GIFs to MP4 for WhatsApp. Minor inconsistency: SKILL.md asks to 'Always get 5 results' in one place but uses --max 3 in an example; not a security problem but an operational mismatch. The hard-coded workspace path (/root/.openclaw/workspace) is an implementation assumption that may not match every agent environment.
Instruction Scope
Instructions are narrowly scoped to searching, downloading to /tmp, converting, copying to the workspace, and using the platform message tool to send. They do not request unrelated files or credentials. Caveats: the doc claims downloads are 'cleaned up after sending' but provides no cleanup commands, and it hardcodes the workspace path which could require write access or elevated privileges on some hosts.
Install Mechanism
Instruction-only skill (no install spec or code), which minimizes installation risk. It does require existing binaries (gifgrep, ffmpeg, curl); gifgrep may not be present by default on many systems, but requiring these binaries is coherent with the stated workflow.
Credentials
No environment variables, credentials, or config paths are requested. Uses the platform's message tool for delivery (the SKILL.md states no separate WhatsApp credentials are needed). The only environment assumption is write access to /tmp and the hard-coded workspace path.
Persistence & Privilege
Skill is user-invocable and not forced-always; it does not request persistent privileges or modify other skills. Autonomous invocation is allowed but that is the platform default and not by itself a red flag.
Assessment
This skill appears to do what it says, but before installing:
- Verify the agent host has gifgrep, ffmpeg, and curl installed and that gifgrep is configured to search trusted providers (Tenor/Giphy) as claimed.
- Confirm the workspace path /root/.openclaw/workspace exists and is writable by the agent; if your platform uses a different workspace location, update the instructions accordingly.
- Add or verify cleanup steps (remove temporary files from /tmp and workspace) to avoid leaving media behind.
- Test in a non-production environment to ensure the message tool accepts the copied file and that gifPlayback=true renders as expected.
- If you have multi-tenant or restricted environments, ensure copying files into the workspace does not expose media to other agents or users.Like a lobster shell, security has layers — review code before you run it.
latestvk9714z200p43bjrapyf66pn8h183y7jb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
Binsgifgrep, ffmpeg, curl
