Generate a Clawdy selfie with the installed local helper script and the configured FAL_KEY.

Do not install or run this skill blindly. Specific issues to consider before using it: (1) The scripts expect a bundled reference image at assets/clawdy.png, but the manifest does not include that file — ask the author to include it or provide one and verify it is the intended image. (2) The skill uses secrets not declared in the registry: FAL_KEY (required) and SEEDANCE_API_KEY (for video); supplying these gives the skill access to external services — only provide keys you trust and consider using scoped/test keys. (3) The video helper uploads the reference image to public hosting services (file.io, 0x0.st) and then sends it to a third-party API (default base API domain is api.outai.top) — this publicly exposes the reference image and is a privacy concern; verify and trust the remote endpoint before running. (4) The scripts call local tools (jq, python3, curl, openclaw CLI); ensure these binaries are present and that you understand what the openclaw CLI will do on your system. (5) If you need to proceed, run the scripts in an isolated environment (container or VM), inspect the reference image and all network endpoints first, and prefer providing only minimal, revocable API credentials. Finally, request that the skill author update the SKILL.md and registry metadata to list required env vars, binaries, and to disclose the public uploads and external API endpoints — the missing declarations are the main coherence/security problem.

Type: OpenClaw Skill Name: clawdy-selfie Version: 1.0.1 The skill is designed to generate images and videos of a specific character ('Clawdy') using external AI services (fal.ai and Seedance). The scripts (clawdy-selfie.sh, clawdy-video.sh, and clawdy-selfie.ts) implement the logic for calling these APIs and sending the results back via the OpenClaw CLI. While clawdy-video.sh uploads the bundled reference image to public hosting services like file.io or 0x0.st to facilitate video generation, this behavior is limited to the skill's own assets and is a functional requirement for the Seedance API. The instructions in SKILL.md are well-aligned with the stated purpose and do not contain any malicious prompt injections or attempts to exfiltrate sensitive user data.