Gifgrep
v1.0.1Search GIF providers with CLI/TUI, download results, and extract stills/sheets.
⭐ 6· 15.2k·1.1k current·1.2k all-time
byPeter Steinberger@steipete
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
SKILL.md describes a CLI/TUI tool (gifgrep) that searches GIF providers, downloads results, and extracts stills/sheets. The instructions and declared install options (brew formula and Go module pointing to github.com/steipete/gifgrep) match that purpose. However, the registry metadata summary provided to you earlier said no required binaries/env vars, while SKILL.md metadata requires the gifgrep binary and documents GIPHY_API_KEY/TENOR_API_KEY — a metadata mismatch worth noting.
Instruction Scope
The instructions tell the agent to run gifgrep commands, optionally write downloads to ~/Downloads, and reveal files in Finder; they do not instruct reading unrelated system files, sweeping env variables, or transmitting data to unexpected endpoints. Environment tweaks are limited to gifgrep-specific variables.
Install Mechanism
Install options are standard: a Homebrew formula (steipete/tap/gifgrep) and a Go module (github.com/steipete/gifgrep/cmd/gifgrep@latest). Both are traceable to public package sources/GitHub rather than arbitrary download URLs or opaque archives.
Credentials
SKILL.md documents GIPHY_API_KEY (required for --source giphy) and TENOR_API_KEY (optional); these are proportional to the stated functionality. The earlier registry metadata claiming no required env vars conflicts with SKILL.md — verify which metadata the platform will rely on and be prepared to supply a provider API key if you want Giphy support.
Persistence & Privilege
The skill is instruction-only (no code files bundled) and does not request always: true or any elevated/persistent system privileges. It does not modify other skills' configs or request system-wide credentials.
Assessment
This skill appears to do what it says — a CLI/TUI for searching and downloading GIFs. Before installing/using it: 1) Note that SKILL.md expects the gifgrep binary; install via the listed Homebrew formula or Go module and verify those upstream sources (brew tap and GitHub repo) yourself. 2) If you want Giphy results you must provide a GIPHY_API_KEY; only give keys with appropriate scope and from a trusted account. Tenor works with a demo key by default. 3) The registry metadata you were shown omitted the binary/env requirements — confirm the platform will surface the SKILL.md requirements to you at install time. 4) Since the skill works by invoking an external binary, review that binary's source/release and checksums where possible (and the brew tap/GitHub repo) before trusting it. 5) The tool writes downloads to ~/Downloads and can reveal files in Finder; it does not request unrelated system data in the instructions. If you want stronger assurance, review the gifgrep project's source code and releases directly.Like a lobster shell, security has layers — review code before you run it.
latestvk976xmpr3181h0w6arr6z0708s7yjq67
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧲 Clawdis
Binsgifgrep
Install
Install gifgrep (brew)
Bins: gifgrep
brew install steipete/tap/gifgrepInstall gifgrep (go)
Bins: gifgrep
go install github.com/steipete/gifgrep/cmd/gifgrep@latest