ClawHub

AI Face Merge: Free Online AI Face Morph & Face Merge Tool – API-powered

v1.0.0

AI face merge — blend two faces together into a single realistic portrait

⭐ 0· 3·0 current·0 all-time
by@sparkleming
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (AI face merge) align with the only required credential (WESHOP_API_KEY) and the documented endpoints on openapi.weshop.ai. Requesting a single API key for the third‑party service is appropriate for this functionality.
ℹ
Instruction Scope
SKILL.md confines runtime actions to openapi.weshop.ai endpoints and explicitly instructs the agent to only send the API key to that domain. Minor inconsistency: the input schema describes input.images (array of two URLs) but the request example uses input.originalImage; this is likely a documentation mismatch but should be clarified. The skill instructs uploading local images via /openapi/agent/assets/images (reasonable), but provides no code snippets for performing the multipart upload — again a documentation gap rather than malicious scope creep.
✓
Install Mechanism
Instruction-only skill with no install spec or code files; nothing will be written to disk by an installer. Lowest risk for install mechanism.
✓
Credentials
Only WESHOP_API_KEY is required and is justified by the remote API usage. The SKILL.md also warns about not leaking the key to other domains, which is proportionate and appropriate.
✓
Persistence & Privilege
Skill does not request always:true or any elevated persistence. Default autonomous invocation is allowed but not combined with any other concerning privileges.
Assessment
This skill appears coherent: it needs only a WeShop API key and will call openapi.weshop.ai to upload images and start runs. Before installing, confirm you trust WeShop and that the WESHOP_API_KEY you supply was obtained from the official site. Note the SKILL.md contains a small documentation mismatch (input.images vs input.originalImage) — ask the publisher to clarify how to structure the request. Also consider privacy and legal issues: face‑merge operations can be sensitive (consent, likeness rights), and you should avoid uploading images you don't own or have permission to use. Finally, monitor network activity or API usage after first run to confirm the skill only communicates with openapi.weshop.ai and that billing/retention behavior matches your expectations.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b9kdykm836nzs4k2m588e8184p36h

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvWESHOP_API_KEY
Primary envWESHOP_API_KEY

Comments