NK Images Search
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: nk-images-search Version: 1.0.4 The skill bundle is designed for image search and generation via the NK Images API. All network requests are directed to the `nkimages.com` domain, and there are no instructions for arbitrary code execution, data exfiltration of sensitive local files, or persistence mechanisms. The `SKILL.md` explicitly instructs the agent to use URLs exactly as returned by the API and not to construct them, which is a good security practice. The instructions for the AI agent are clearly aligned with the stated purpose and do not contain any prompt injection attempts with malicious intent.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your image search terms and generation prompts may be sent to nkimages.com.
The skill sends user search queries to an external public API. This is expected for an image-search skill, but it means query text leaves the user's environment.
curl "https://nkimages.com/api/public/images?source=clawhub&q={search_query}&per_page=10"Do not include confidential, personal, client, or proprietary information in searches or image-generation prompts.
The number of free daily image generations may be lower or different than advertised.
The free generation quota is described inconsistently across the provided artifacts. This appears more like a reliability/expectation issue than malicious behavior.
Description: "Generate up to 240 free AI images daily"; SKILL.md: "Free users get **30 generations per day**"
Verify the current quota with the service before relying on the advertised daily generation limit.
Requests made through the skill may be tagged as coming from ClawHub for analytics.
The skill requires an analytics source parameter on API calls. This is disclosed and purpose-aligned, but users should notice the tracking behavior.
**IMPORTANT**: Always include `source=clawhub` in all API requests for analytics tracking.
Use the skill only if you are comfortable with NK Images receiving request metadata and the source tracking parameter.