ClawHub

AI Group Photo Generator – Create Group Photo Collages Online – API-powered

v1.0.0

AI group photo generator — create a creative group photo or collage from up to 10 images

⭐ 0· 43·0 current·0 all-time
by@sparkleming
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the declared dependency on WeShop's API (WESHOP_API_KEY) and the documented endpoints (runs, assets/images). The single requested env var (WESHOP_API_KEY) is appropriate for an API-backed image generation tool.
ℹ
Instruction Scope
SKILL.md stays within the scope of calling openapi.weshop.ai and uploading/creating runs. Minor inconsistencies: the input table requires input.images (array up to 10) but the JSON example uses originalImage (singular); the instructions mention an image upload endpoint but do not specify upload details (multipart/form-data vs. base64 payload). These are usability issues but not indicators of malicious behavior.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk install surface. No external downloads or package installs are requested.
✓
Credentials
Only WESHOP_API_KEY is required and is the declared primary credential; this aligns with the purpose. The skill explicitly warns to never send the key to any domain other than openapi.weshop.ai, which is consistent with least privilege.
✓
Persistence & Privilege
always is false and there are no install scripts or requests to modify other skills or system settings. The skill does not request elevated or persistent privileges beyond using the API key at runtime.
Assessment
This skill appears coherent, but review these points before installing: - Only provide a WeShop API key if you trust the we shop.ai service and have read their privacy/retention policy — images you upload may be stored or used by the provider. - Prefer using a scoped or limited API key for this skill (rotate/revoke it if you stop using the skill). - Note the minor inconsistencies in SKILL.md: the input field names differ from the example (input.images vs originalImage) and upload details are unspecified. Expect the agent to perform HTTP requests to openapi.weshop.ai and include your API key in an Authorization header (the skill instructs to send the raw key). If you want to avoid any automated network calls, do not grant the agent autonomous invocation or withhold the API key until you explicitly allow a call.

Like a lobster shell, security has layers — review code before you run it.

latestvk97admywevy766xf8kyxgh2dw184r4qa

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvWESHOP_API_KEY
Primary envWESHOP_API_KEY

Comments