ClawHub

AI Pet Portrait Generator – CLI-powered

v1.0.0

AI pet portrait generator — create or transform pet photos with a text prompt; image is optional

⭐ 0· 59·0 current·0 all-time
by@sparkleming
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description map directly to the weshop 'ai-dog' CLI command documented in SKILL.md. The single required env var (WESHOP_API_KEY) and the referenced npm CLI are appropriate for a service-backed image-generation skill.
✓
Instruction Scope
SKILL.md confines the agent to using the weshop CLI and the WESHOP_API_KEY env var; it instructs the agent to check for the env var before asking the user and warns not to pass the API key on the command line. The instructions do not request unrelated files, system config, or other credentials.
ℹ
Install Mechanism
There is no install spec in the package (instruction-only). SKILL.md recommends installing 'weshop-cli' via 'npm install -g weshop-cli' which is a normal distribution method for Node CLIs — but installing global npm packages has the usual supply-chain risk (review package/repo before installing).
✓
Credentials
Only WESHOP_API_KEY is required and declared as the primary credential; this is proportionate for a CLI that calls a hosted API. The skill explicitly instructs the agent not to exfiltrate the key and to read it from the environment rather than passing it as a CLI argument.
✓
Persistence & Privilege
The skill does not request persistent/always-on privileges (always: false) and does not claim to modify other skills or global agent settings. Normal autonomous invocation remains enabled (platform default).
Assessment
This skill is coherent: it uses the weshop CLI and a single WeShop API key. Before installing or running: (1) Verify you want to install a global npm package and review the weshop-cli package/repo (https://github.com/weshopai/weshop-cli and npm page) to confirm it's the official implementation. (2) Do not paste your WESHOP_API_KEY into chat or pass it as a CLI argument — set it as an environment variable instead. (3) Consider creating a dedicated, least-privileged API key for this use and revoke it if you stop using the service. (4) If you prefer not to install global packages, ask whether the agent can run the service via a hosted endpoint or sandboxed container. These steps reduce supply-chain and credential exposure risk.

Like a lobster shell, security has layers — review code before you run it.

latestvk971c2p9njex3j5n40nxcjaf7584qxd6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvWESHOP_API_KEY
Primary envWESHOP_API_KEY

Comments