Picsee Short Link

PicSee URL shortener with QR code generation, analytics charts, and link management via CLI. Use when the user asks to shorten a URL, generate QR codes, visu...

This skill appears to do what it says: it's a Node.js CLI that talks to PicSee and related services and stores your PicSee API token encrypted at ~/.openclaw/.picsee_token with a salt at ~/.openclaw/.picsee_salt. Before installing: 1) Ensure Node.js >=18 is available (the bundled CLI requires it — the registry metadata omitted listing Node as a required binary). 2) Review and, if desired, run the CLI source in a sandboxed environment first. 3) Note the token is encrypted but stored locally; if an attacker gains full disk access they could attempt to recover it (the key derivation uses hostname+username + salt, which mitigates but does not eliminate risk). 4) Confirm you trust the publisher (no homepage is provided) and that network access to api.pics.ee, chrome-ext.picsee.tw, api.qrserver.com and quickchart.io is acceptable. 5) If you want least privilege, create and use a PicSee token with limited scope or monitor network activity when first using the skill.

Type: OpenClaw Skill Name: picsee-short-link Version: 2.0.1 The PicSee Short Link skill is a legitimate tool for URL shortening and analytics management. It features a well-structured CLI that interacts with official PicSee API endpoints (api.pics.ee, chrome-ext.picsee.tw) and reputable third-party services (api.qrserver.com, quickchart.io). A notable security feature is the implementation of AES-256-CBC encryption for local token storage in `keychain.ts`, using a machine-specific key derived from the hostname and username. The instructions in `SKILL.md` for downloading images via `curl` are safely scoped to the skill's temporary directory and are consistent with its stated purpose of generating QR codes and charts.