Clawra Selfie

Generate Clawra-style selfie images with a Qwen-first image backend (with optional Gemini and HF fallback) and send them to messaging channels via OpenClaw.

Before installing or running this skill: 1) Review and set required API keys (QWEN_API_KEY or HF_TOKEN; GEMINI_API_KEY only if you enable Gemini). The registry metadata incorrectly lists no required env vars—trust the SKILL.md/scripts instead. 2) Inspect scripts before running any curl|bash installer; prefer cloning the GitHub repo with git and review install.sh. 3) Update the hard-coded paths (/home/Jaben/...) in scripts/ts to match your system (or install under that exact path) to avoid accidental access to other directories or failures. 4) Store API tokens with least privilege and separate tokens for demo/testing; avoid reusing high-privilege keys. 5) Consider running the skill in an isolated account/container and keep private reference images out of public repos. 6) If you plan to reuse the included TypeScript wrapper, change the absolute script path to a relative or configurable location so it won't execute unintended files. If these issues are addressed (metadata fixed, paths parameterized, install guidance removed or made safer), the skill's risk would be much lower.

Type: OpenClaw Skill Name: nasplycc-clawra-selfie Version: 1.1.3 The skill bundle is a functional tool for generating AI images using Qwen, Gemini, or Hugging Face APIs and routing them to messaging channels via OpenClaw. The code logic in 'clawra-selfie.sh' and 'clawra-selfie.ts' is transparent and aligns with the stated purpose of the skill. While the bundle contains hardcoded absolute paths referencing a specific user environment ('/home/Jaben/') and suggests a 'curl | bash' installation method in the README—both of which are poor security practices—there is no evidence of malicious intent, data exfiltration, or unauthorized system modification.