AppScreenshotStudio
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears coherent and benign, but it will read app project details, send a summarized context to AppScreenshotStudio, and use an API key with account credits.
This skill is reasonable to use if you are comfortable sharing summarized app details with AppScreenshotStudio and using account credits. Before running the API steps, review the extracted context, remove secrets or sensitive business information, and keep the API key private.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may create remote screenshot projects and spend AppScreenshotStudio credits when the user proceeds with generation.
The skill instructs the agent to make external API POST requests that create projects and generate screenshot sets. This is central to the stated purpose and is preceded by a user confirmation step.
curl -s -X POST https://appscreenshotstudio.com/api/v1/projects ... curl -s -X POST "https://appscreenshotstudio.com/api/v1/projects/$PROJECT_ID/chat"
Confirm the requested screenshot details before generation, and be aware that each chat generation may consume credits.
Anyone with the API key could potentially use the connected AppScreenshotStudio account or consume credits.
The skill requires an API key associated with a paid or credit-bearing account. This is expected for the integrated service and is clearly disclosed.
Requires `APPSCREENSHOTSTUDIO_API_KEY` in your environment. Get a key at https://appscreenshotstudio.com/settings (requires an account with credits).
Store the API key securely, do not paste it into prompts or shared files, and revoke or rotate it if exposed.
Summaries of app features, screens, branding, audience, and positioning may be shared with AppScreenshotStudio’s backend.
The workflow sends summarized codebase and product context to an external API, which is necessary for the service but means selected project information leaves the local environment.
"codebase_context": { "readme_summary": "...", "key_screens": ["..."], "color_tokens": {"primary": "#hex"}, "target_audience": "..." }Review the context before sending it and exclude secrets, private customer data, unreleased strategic information, or anything not needed for screenshot generation.