AI Pose Generator – API-powered

• Risk level: Low
• Analyzed: Apr 14, 2026, 6:04 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill is internally consistent: it claims to call the WeShop pose-change API and only requests a WeShop API key and HTTPS access to openapi.weshop.ai, which matches its documented behavior.

This skill appears coherent and limited to calling WeShop's openapi.weshop.ai endpoints. Before installing or providing an API key: (1) verify you trust https://openapi.weshop.ai and the linked service (images and metadata will be sent to that external API); (2) only supply a WeShop API key — do not reuse a high-privilege or long-lived credential used for other services; prefer a scoped or disposable key if available; (3) monitor API key usage and rotate the key if you see unexpected activity; (4) the SKILL.md warns to never send the key to other domains — treat that as an operational requirement (the agent cannot technically enforce it for you); (5) if you need stronger assurance, ask for the skill's source or official homepage and consider testing with a non-sensitive image and a limited-scope API key first.