Giphy
v1.0.7Search and send contextual Giphy GIFs in Discord. Use when a user asks for a GIF or when a brief visual reaction (celebration, humor, emotion) improves the flow.
⭐ 3· 3.3k·4 current·4 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Giphy GIF search for Discord) aligns with the single required secret (GIPHY_API_KEY) and the runtime instructions (build Giphy search URL, fetch one GIF, send the GIF URL). There are no unrelated credentials, binaries, or install steps requested.
Instruction Scope
SKILL.md stays on-topic: it explains when to send GIFs, how to form the API request, how to extract data[0].url, and what to send to Discord. It only references the single env var GIPHY_API_KEY and a suggested local .env file for persistence, which is appropriate for this skill's operation.
Install Mechanism
No install spec or external downloads are present (instruction-only). This minimizes disk/write risk and matches the declared manifest.
Credentials
Only one environment variable (GIPHY_API_KEY) is required, which is proportionate to the skill's function. No unrelated secrets or config paths are requested.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does recommend storing the API key in ~/.openclaw/.env for persistence, but it does not request elevated privileges or modify other skills' configurations.
Assessment
This skill appears coherent and only needs a GIPHY API key to function. Consider these points before installing: (1) The skill will make outbound requests to api.giphy.com and post GIF URLs to Discord — if you restrict network calls or external integrations, don't install. (2) Storing the API key in ~/.openclaw/.env persists a secret on disk; if you prefer, set the key only for the session (export) or use a secrets manager. (3) Giphy rate limits and content policies still apply; the skill enforces rating=g but review behavior if you need stricter filters. (4) Because the skill can be invoked autonomously by the agent (normal default), ensure you trust the agent context in which it will run.Like a lobster shell, security has layers — review code before you run it.
latestvk970zcw6wa34gdy8pcqdv2r69n80snsn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
