ClawHub

AI Hairstyle Generator

v1.0.1

Try different hairstyles and accessories on photos using AI via Media.io OpenAPI. Preview new haircuts, hair colors, glasses, hats. AI hairstyle generator, h...

⭐ 0· 98·0 current·0 all-time
by@wondershare-boop
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the declared requirements: the skill only needs a single Media.io API key and curl to call Media.io endpoints for hairstyle generation. Nothing requested (no unrelated cloud creds or system files) appears out of scope.
✓
Instruction Scope
SKILL.md instructs only to call Media.io endpoints (credits, create task, poll results), validate an external image URL, and avoid exposing API keys in logs. It does not instruct reading unrelated files, environment variables, or config paths.
✓
Install Mechanism
There is no install spec (instruction-only skill). No downloads or archive extraction are required, so no elevated install risk is introduced by the skill itself.
✓
Credentials
Only MEDIAIO_API_KEY is required and is the primary credential for the stated API usage. No additional secrets or unrelated environment variables are requested.
✓
Persistence & Privilege
The skill does not request always:true and is user-invocable only. It does not attempt to modify other skills or agent-wide settings in the provided instructions.
Assessment
This skill appears coherent, but remember: using it will send user-provided images (via their public URLs) to Media.io for processing and will consume credits on the associated API key. Before installing, verify the MEDIAIO_API_KEY has appropriate scope and billing limits, avoid sending sensitive/controlled images, ensure users consent to external processing, and rotate/store the API key securely. Also confirm your agent implementation actually avoids logging the raw X-API-KEY (SKILL.md advises this but the runtime must enforce it). If you need local-file support, note this skill only accepts URLs — do not supply local paths without first uploading to a secure URL you control.

Like a lobster shell, security has layers — review code before you run it.

latestvk976bgnqpebth8z4exmewbf3gd8368k4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binscurl
EnvMEDIAIO_API_KEY
Primary envMEDIAIO_API_KEY

Comments