Photo Pack Generator

Generate a pack of professional or aesthetic photos from a single reference image while preserving the exact identity of the person.

Before installing or running this skill: 1) Inspect the referenced helper scripts (../../../../core/media/upload.sh and generate-image.sh) to confirm where images are uploaded, which external endpoints are contacted, and what credentials (if any) they use. 2) Review the bundled prompts: there are contradictions between the SKILL.md guardrails (don’t describe hair/age/etc., preserve identity) and concrete prompt templates that add hairstyles/props/implants — decide whether those templates meet your privacy/consent requirements. 3) Confirm you have permission from any person whose face will be used; this tool can produce realistic, contextualized images of a real person which may have legal or ethical implications. 4) If you plan to run this in a restricted environment, run the script in a sandbox and monitor network calls and file writes. If you cannot inspect the helper scripts or verify where uploads go, treat the skill as untrusted.

Type: OpenClaw Skill Name: muapi-photo-pack-skill Version: 0.1.0 The skill utilizes high-risk capabilities including shell execution of external scripts via relative path traversal (scripts/generate-pack.sh), network access via curl to download remote assets, and the use of the 'open' command to interact with files. While these behaviors are plausibly aligned with the stated purpose of generating and viewing photo packs, the script's ability to upload arbitrary local files and the potential for shell injection via unsanitized command-line arguments (e.g., --likeness) represent significant security vulnerabilities.