ClawHub

AI Gender Swap

v1.0.2

Transform photos and images into Studio Ghibli-style artwork using AI via Media.io OpenAPI. Applies the iconic hand-drawn, painterly aesthetic of Ghibli film...

⭐ 0· 100·0 current·0 all-time
by@wondershare-boop
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill's name/description (Media.io gender-swap in Ghibli style) matches the declared requirements: one HTTP client binary (curl) and one service API key (MEDIAIO_API_KEY). Required endpoints and the model code referenced correspond to Media.io's generation API; there are no unrelated credentials, binaries, or configuration paths requested. Note: the skill's source is listed as unknown in the registry metadata, but the SKILL.md points to Media.io endpoints and the platform docs URL.
✓
Instruction Scope
SKILL.md provides concrete, narrow runtime instructions: call credits endpoint, submit create-task with an image URL, poll result endpoint, and return output URLs. It requires the caller to provide an externally reachable image URL (explicitly excludes local-only uploads). The instructions do not ask the agent to read arbitrary system files, other environment variables, or to send data to off-network endpoints. The doc also includes basic safety guidance (validate URL, avoid logging raw API keys).
✓
Install Mechanism
There is no install spec and no code files—this is instruction-only. That minimizes disk writes and arbitrary code execution risk; the only runtime dependency is curl which is a reasonable, minimal requirement for making HTTP requests.
✓
Credentials
Only MEDIAIO_API_KEY is required and is declared as the primary credential. That aligns with the skill's purpose (calling Media.io APIs). No unrelated secrets or multiple service credentials are requested.
✓
Persistence & Privilege
The skill is not marked always:true and has no install-time modifications or requests for system-wide config. The default ability for the agent to invoke the skill autonomously is unchanged and is normal for skills; it is not combined with broad credential or persistence demands.
Assessment
This skill appears coherent, but before installing: 1) Only provide an API key scoped to Media.io (avoid reusing high-privilege or long-lived keys). 2) Verify the MEDIAIO_API_KEY is from your Media.io account and check Media.io's billing/credit implications (the skill checks credits before generation). 3) The API expects an externally reachable image URL—do not supply private/local file URLs unless you host them temporarily for the service. 4) Review Media.io's privacy and retention policy for generated images (output URLs may be signed/temporary). 5) Because the registry lists an unknown source, consider verifying the owner/publisher or obtaining the SKILL.md from a trusted source (Media.io docs) if you require stronger provenance assurance.

Like a lobster shell, security has layers — review code before you run it.

latestvk97686p2thhtxc15f54mt1804x837839

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binscurl
EnvMEDIAIO_API_KEY
Primary envMEDIAIO_API_KEY

Comments