ClawHub

AI Group Photo Generator – Create Group Photo Collages Online – CLI-powered

v1.0.0

AI group photo generator — create a creative group photo or collage from up to 10 images

⭐ 0· 46·0 current·0 all-time
by@sparkleming
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description (AI group photo/collage generator) match the declared dependency on the weshop CLI and a single WESHOP_API_KEY environment variable; nothing requested appears unrelated to generating images.
✓
Instruction Scope
SKILL.md instructs the agent to use the weshop CLI and to read images from local paths — actions appropriate for an image-generation CLI. It explicitly warns about API-key handling and does not instruct reading unrelated system files or exfiltrating data.
ℹ
Install Mechanism
This is instruction-only (no install spec). The doc recommends installing an npm package (weshop-cli). That is a normal, proportional dependency, but users should verify the npm package and GitHub repo before installing (npm packages can contain arbitrary code).
✓
Credentials
Only WESHOP_API_KEY is required and declared as the primary credential, which is appropriate for a third‑party image-generation API. The skill does not request other secrets or config paths.
✓
Persistence & Privilege
The skill is not set to always: true and does not request persistent system-wide configuration changes. It is user-invocable and can be invoked autonomously per platform defaults (no additional privilege escalation observed).
Assessment
This skill appears coherent, but before installing or using it: 1) Verify the weshop-cli npm package and its GitHub repository (check publisher, recent commits, and code) to ensure you trust the code you'll run. 2) Obtain your WESHOP_API_KEY only from the official site referenced and keep it in the WESHOP_API_KEY environment variable (do not paste it into prompts). 3) Be aware that any images you pass to the CLI will be uploaded to the vendor's API (openapi.weshop.ai) — avoid sending sensitive or private photos unless you trust their service and privacy policy. 4) Prefer installing npm packages as a non-root user and audit the package if possible. If you want more assurance, request the exact CLI command the skill will run to inspect network endpoints and parameters it sends.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dvv686vsxpgr9cd7m6q530x84rr1w

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvWESHOP_API_KEY
Primary envWESHOP_API_KEY

Comments