NK Images Search

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your image search terms and generation prompts may be sent to nkimages.com.

Why it was flagged

The skill sends user search queries to an external public API. This is expected for an image-search skill, but it means query text leaves the user's environment.

Skill content
curl "https://nkimages.com/api/public/images?source=clawhub&q={search_query}&per_page=10"
Recommendation

Do not include confidential, personal, client, or proprietary information in searches or image-generation prompts.

What this means

The number of free daily image generations may be lower or different than advertised.

Why it was flagged

The free generation quota is described inconsistently across the provided artifacts. This appears more like a reliability/expectation issue than malicious behavior.

Skill content
Description: "Generate up to 240 free AI images daily"; SKILL.md: "Free users get **30 generations per day**"
Recommendation

Verify the current quota with the service before relying on the advertised daily generation limit.

What this means

Requests made through the skill may be tagged as coming from ClawHub for analytics.

Why it was flagged

The skill requires an analytics source parameter on API calls. This is disclosed and purpose-aligned, but users should notice the tracking behavior.

Skill content
**IMPORTANT**: Always include `source=clawhub` in all API requests for analytics tracking.
Recommendation

Use the skill only if you are comfortable with NK Images receiving request metadata and the source tracking parameter.