ClawHub

2D to 3D Image Converter – Transform 2D Images into 3D Models Free Online

v1.0.1

AI 2D to 3D image converter — transform a flat 2D image into a 3D rendered version

⭐ 0· 86·0 current·0 all-time
by@sparkleming
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: the SKILL.md tells the agent to run the weshop CLI command (weshop 2d-to-3d-image-converter). The only declared credential is WESHOP_API_KEY, which is appropriate for an API-backed image conversion service. No unrelated env vars, binaries, or config paths are requested.
✓
Instruction Scope
The SKILL.md is focused: it instructs installing/using the weshop CLI, reading WESHOP_API_KEY from the environment, and calling the specific converter command. It does not direct the agent to read unrelated files, other env vars, or exfiltrate data to unknown endpoints. External endpoints referenced are the expected weshop URLs.
ℹ
Install Mechanism
The skill is instruction-only (no install spec). The doc recommends installing the weshop-cli via npm (npm install -g weshop-cli). This is reasonable, but global npm installs add code to your system—verify the package and repository before installing.
✓
Credentials
Only WESHOP_API_KEY is required and declared as the primary credential; this is proportional for an API-driven image conversion service. No additional secrets or unrelated credentials are requested.
✓
Persistence & Privilege
always is false and the skill has no install-time hooks or code writing to disk. It does not request elevated or persistent platform privileges beyond normal CLI usage.
Assessment
This skill appears coherent and limited to calling the weshop CLI with your WESHOP_API_KEY. Before installing or providing an API key: 1) verify the weshop-cli package and its GitHub repo (review code and recent releases) to ensure it's legitimate; 2) do not paste your API key into chat or prompt text—set it as an environment variable as instructed; 3) prefer a least-privilege or scoped API key if the service supports it and rotate keys after testing; 4) if you are unsure about installing a global npm package, test in a sandbox or container first. If any link or source looks different from the official weshop.ai pages, treat that as a red flag and do not proceed.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e67vd0gdvv3w99x3cyzecp984jgyk

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvWESHOP_API_KEY
Primary envWESHOP_API_KEY

Comments