ClawHub

Flag Maker Free – Design and Create Your Own Custom Flag for Free – CLI-powered

v1.0.0

AI flag generator — create a custom flag design from text or a reference image

⭐ 0· 56·0 current·0 all-time
by@sparkleming
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is a front-end for the WeShop AI flag generator and only declares the weshop CLI and a WESHOP_API_KEY environment variable, which are appropriate and expected for that purpose.
✓
Instruction Scope
SKILL.md restricts operations to using the weshop CLI and checking/reading the WESHOP_API_KEY env var. It does not instruct the agent to read unrelated files, exfiltrate data, or contact endpoints other than the specified WeShop domain.
ℹ
Install Mechanism
There is no registry install spec (instruction-only). The README recommends installing the third-party npm package weshop-cli (npm install -g weshop-cli) and links to GitHub and npm — this is reasonable but installing global npm packages carries the usual trust risks (verify the package, maintainer, and source).
✓
Credentials
Only one credential (WESHOP_API_KEY) is required and it is the declared primary credential. The SKILL.md explicitly warns against passing the key on the command line and limits transmission to the WeShop API, which matches the skill's needs.
✓
Persistence & Privilege
The skill does not request always:true or other elevated persistent privileges; it is user-invocable and allows normal autonomous invocation, which is typical and expected.
Assessment
This skill appears to do what it says: call the WeShop CLI using an API key. Before installing or using it, verify the weshop-cli npm package and its GitHub repo (maintainer, download counts, recent updates), avoid installing untrusted global npm packages if possible, keep your WESHOP_API_KEY secret (set via environment variable, not pasted), and confirm you trust weshop.ai's privacy and usage policies. If you need higher assurance, review the weshop-cli source on GitHub before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c9e4whknt3pwbkz71dgg7f584qqk8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvWESHOP_API_KEY
Primary envWESHOP_API_KEY

Comments