ClawHub

AI Face Merge: Free Online AI Face Morph & Face Merge Tool – CLI-powered

v1.0.0

AI face merge — blend two faces together into a single realistic portrait

⭐ 0· 48·0 current·0 all-time
by@sparkleming
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the declared requirements: the skill needs a WESHOP_API_KEY and the weshop CLI to call WeShop's AI face-merge endpoint. Each requirement is relevant to the stated purpose.
✓
Instruction Scope
SKILL.md only instructs checking/using the WESHOP_API_KEY, confirming the weshop CLI is installed, and running the weshop ai-face-merge command with user-supplied images. It does not request unrelated files, credentials, or system paths.
ℹ
Install Mechanism
The skill is instruction-only (no install spec) but recommends installing an npm package globally (npm install -g weshop-cli). Installing third-party npm CLIs runs arbitrary code on the host — the instruction is expected for this skill but warrants verification of the package's authenticity and trustworthiness.
✓
Credentials
Only a single credential (WESHOP_API_KEY) is required and declared as the primary credential. That is proportionate to a CLI that calls a remote AI image service. SKILL.md explicitly warns not to pass the key on the command line.
✓
Persistence & Privilege
The skill does not request persistent/always-on presence or any elevated platform privileges. It is user-invocable and does not modify other skills or system-wide settings.
Assessment
This skill appears internally consistent for calling a WeShop face-merge CLI. Before installing or using it: 1) Verify that the weshop-cli npm package and the linked GitHub repo are legitimate and maintained (check npmjs.org and the repo for stars, recent commits, and issues). 2) Confirm the API endpoint (openapi.weshop.ai) and that TLS is used; never paste your API key into chat or CLI flags. 3) Consider creating a limited or revocable API key or using an account dedicated to this tool. 4) Because global npm installs can execute code on your machine, prefer installing in a controlled environment (container, VM, or dedicated account) if you have security concerns. If you need further analysis, provide the weshop-cli package source or the contents of the GitHub repo for a deeper review.

Like a lobster shell, security has layers — review code before you run it.

latestvk97672sagvxypkq9xncyn829g984qpck

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvWESHOP_API_KEY
Primary envWESHOP_API_KEY

Comments