ClawHub

AI Action Figure Generator – Turn Your Photo into a Custom Toy Version – API-powered

v1.0.0

AI action figure generator — turn a photo or character into a collectible action figure display

⭐ 0· 17·0 current·0 all-time
by@sparkleming
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description match the declared dependency on a WeShop API key and HTTPS access to openapi.weshop.ai; no unrelated env vars, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md limits network calls to openapi.weshop.ai endpoints (start run, poll status, upload images) and instructs the agent to check WESHOP_API_KEY before asking the user. It does not instruct reading other system files or exfiltrating data to other domains. Note: the doc requires the raw API key in the Authorization header (no Bearer prefix) — this is atypical but may be API-specific.
✓
Install Mechanism
No install spec or code is included (instruction-only skill), so nothing is downloaded or written to disk by the skill itself.
✓
Credentials
Only one env var (WESHOP_API_KEY) is required and it is the declared primary credential, which is proportionate for an API-backed service. There are no unrelated credentials requested.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and uses normal autonomous-invocation defaults.
Assessment
This skill appears coherent, but take normal precautions: only provide a valid WESHOP_API_KEY if you trust openapi.weshop.ai; avoid uploading sensitive or identifiable photos (these are sent to an external service); keep the API key secret and revoke it if misused; verify billing and privacy policies on WeShop; confirm how your agent will supply image files (don't grant unnecessary filesystem access) and prefer using ephemeral keys or scoped keys if available.

Like a lobster shell, security has layers — review code before you run it.

latestvk97495pr8jdk70fm204be721wd84kjc7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvWESHOP_API_KEY
Primary envWESHOP_API_KEY

Comments