Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Image Upscaling

v0.1.5

Upscale and enhance images with Real-ESRGAN, Thera, Topaz, FLUX Upscaler via inference.sh CLI. Models: Real-ESRGAN, Thera (any size), FLUX Dev Upscaler, Topa...

0· 1.6k·7 current·7 all-time
byÖmer Karışman@okaris

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for okaris/image-upscaling.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Image Upscaling" (okaris/image-upscaling) from ClawHub.
Skill page: https://clawhub.ai/okaris/image-upscaling
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install image-upscaling

ClawHub CLI

Package manager switcher

npx clawhub@latest install image-upscaling
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (image upscaling with Real-ESRGAN, Topaz, FLUX, Thera) matches the SKILL.md instructions which call out infsh app run commands to run those upscalers. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions are narrowly scoped to installing the inference.sh CLI and invoking infsh app run with image_url inputs. They do not instruct reading local system files or unrelated environment variables. However, they do instruct running 'infsh login' (implying credential entry) and encourage installing additional skill packages via npx, which expands scope beyond this single skill.
!
Install Mechanism
The SKILL.md directs users to run a remote install stream (curl -fsSL https://cli.inference.sh | sh) and to download platform binaries from dist.inference.sh. Although the doc claims SHA-256 checksums are available, piping a remote script to sh and fetching binaries from an external host is higher-risk than an instruction-only skill with no external execution. No homepage or authoritative repository is provided to verify provenance.
Credentials
The skill declares no required environment variables or credentials, which is reasonable. But it prompts 'infsh login' (implicit credential use) without declaring what credentials are needed or how they're stored. Users should assume account/API credentials may be required by the external service.
Persistence & Privilege
No 'always: true' privilege is requested; the skill is user-invocable only. There is no install spec embedded in the skill bundle that would grant persistent agent-level privileges. The agent could invoke the external CLI if the user installs it, but the skill itself does not request persistent system access.
What to consider before installing
This skill appears to do what it says: use the inference.sh CLI to upscale images. The main red flag is the installer guidance: it tells you to run a remote install script (curl | sh) and download binaries from dist.inference.sh without a cited, auditable project homepage or repository. If you consider installing: (1) inspect the install script before running it (do not pipe blindly); (2) verify the SHA-256 checksums from the stated checksum URL over HTTPS and confirm integrity; (3) prefer manual download and inspection of the CLI binary or source if available; (4) be aware that 'infsh login' will likely collect credentials — confirm how those are stored and what permissions they grant; (5) avoid supplying sensitive or private images to an unfamiliar third-party service until you’ve validated its privacy policy and provenance. If you cannot verify the source or checksums, treat the installer as untrusted and decline to install.

Like a lobster shell, security has layers — review code before you run it.

latestvk973d9j2s1k3rwbjmcshjxxb3s81dt6a
1.6kdownloads
0stars
2versions
Updated 10h ago
v0.1.5
MIT-0

Image Upscaling

Upscale and enhance images via inference.sh CLI.

Image Upscaling

Quick Start

curl -fsSL https://cli.inference.sh | sh && infsh login

infsh app run infsh/real-esrgan --input '{"image_url": "https://your-image.jpg"}'

Install note: The install script only detects your OS/architecture, downloads the matching binary from dist.inference.sh, and verifies its SHA-256 checksum. No elevated permissions or background processes. Manual install & verification available.

Available Upscalers

ModelApp IDBest For
Topaz Image Upscalerfalai/topaz-image-upscalerProfessional quality, any image

Examples

Upscale Any Image

infsh app run falai/topaz-image-upscaler --input '{"image_url": "https://low-res-image.jpg"}'

Workflow: Generate and Upscale

# 1. Generate image with FLUX Klein (fast)
infsh app run falai/flux-2-klein-lora --input '{"prompt": "landscape painting"}' > image.json

# 2. Upscale the result
infsh app run falai/topaz-image-upscaler --input '{"image_url": "<url-from-step-1>"}'

Use Cases

  • AI Art: Upscale generated images for print
  • Old Photos: Restore and enhance resolution
  • Web Images: Prepare for high-DPI displays
  • Print: Increase resolution for large prints
  • Thumbnails: Create high-res versions

Related Skills

# Full platform skill (all 150+ apps)
npx skills add inference-sh/skills@inference-sh

# Image generation (generate then upscale)
npx skills add inference-sh/skills@ai-image-generation

# FLUX models
npx skills add inference-sh/skills@flux-image

# Background removal
npx skills add inference-sh/skills@background-removal

Browse all image apps: infsh app list --category image

Documentation

Comments

Loading comments...