ClawHub

Professional AI Fashion Photo & Image Generator

v1.0.9

Use this skill for image-editing and image-generation tasks, such as replacing models, changing poses, swapping backgrounds, generating scenes, expanding ima...

⭐ 1· 84·0 current·0 all-time
by@sparkleming
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the declared runtime instructions: they call the openapi.weshop.ai endpoints for uploading images, starting runs, and polling results. The single required env var (WESHOP_API_KEY) is appropriate for this API integration.
ℹ
Instruction Scope
SKILL.md stays on-topic (upload local images, post runs, poll results). It appropriately instructs checking WESHOP_API_KEY before asking the user. Note: the doc allows using a callbackUrl for async results — this is normal but means the agent or user could provide a third-party endpoint that would receive generated images; users should avoid untrusted callback URLs and be aware uploads will send image data to openapi.weshop.ai.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk and no external packages are fetched by the skill itself.
✓
Credentials
Only the WESHOP_API_KEY is required and declared as the primary credential; that aligns with the stated API usage. The SKILL.md explicitly warns not to send the key to other domains.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-level presence or to modify other skills; autonomous invocation is allowed by default but that is expected for skills and not excessively privileged here.
Assessment
This skill appears to do what it says: talk to openapi.weshop.ai using your WESHOP_API_KEY and upload images for editing. Before installing or using it: only provide your WESHOP_API_KEY if you trust openapi.weshop.ai; never paste the key into other sites or chat prompts; only upload images you own or are permitted to share (avoid sensitive personal photos); avoid giving untrusted callbackUrl endpoints (they could receive your images); and monitor billing/usage on your WeShop account and revoke the API key if you suspect misuse.

Like a lobster shell, security has layers — review code before you run it.

latestvk9770y7q351fx73mwe28xgdcz1844726

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvWESHOP_API_KEY
Primary envWESHOP_API_KEY

Comments