Photo Webcam
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: photo-webcam Version: 1.0.6 The skill provides a legitimate service for fetching and sending webcam snapshots from foto-webcam.eu to a Telegram channel. The Python script (scripts/foto_webcam_snapshot.py) uses standard libraries to scrape image URLs and download JPGs, while the SKILL.md instructions clearly define the workflow for the AI agent, including using the openclaw CLI for messaging. No evidence of malicious intent, data exfiltration, or unauthorized access was found; the file system and network operations are strictly aligned with the stated purpose.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked for the wrong chat or too broadly, the agent could send webcam images or repeated messages to an unintended Telegram conversation.
The skill tells the agent to send downloaded media through the OpenClaw Telegram messaging CLI. This is purpose-aligned, but it is a side-effecting external message action.
openclaw message send --channel telegram --target <CHAT_ID> --message “Webcam N Name” --media /tmp/webcamN.jpg
Use the skill only for explicit webcam/list requests, verify the target chat, and keep the documented maximum of 6 images per request.
Installation may depend on local Python/request libraries and OpenClaw CLI availability that are not declared up front, and the package source cannot be independently checked from the metadata.
The skill includes runnable helper code, but provenance is limited and runtime dependencies are not declared in the install metadata. The helper source is visible and simple, so this is a review note rather than a concern.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill. Code file presence: scripts/foto_webcam_snapshot.py
Review the included script before use, ensure python3/requests/openclaw are available from trusted sources, and prefer packages with consistent registry and package metadata.