Brave Images

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing or using the skill requires providing a Brave API key, which may incur usage against the user's Brave Search subscription.

Why it was flagged

The skill uses a Brave API key for authentication. This is expected for the stated Brave Search API purpose, but users should notice that the registry metadata lists no required env vars or primary credential.

Skill content
Requires BRAVE_API_KEY environment variable.
Recommendation

Use a dedicated Brave API key with the minimum necessary subscription permissions, monitor usage, and treat the metadata credential omission as a setup/documentation issue rather than hidden behavior.