PicSee URL Shortener & QR Codes (Web)

Quickly shorten URLs and generate QR codes via PicSee (picsee.io). After logging in, you can also view analytics and history. Use when user says "縮網址", "短網址"...

This skill appears to do what it claims, but consider these points before installing: (1) It uses the agent's browser profile (profile: "openclaw") to interact with picsee.io — if that profile contains other logged-in sessions, snapshots could capture unrelated sensitive page content; use an isolated profile if you are concerned. (2) QR generation runs pip install inside a venv in your home (~) and will download packages from PyPI; if you prefer, review or pre-create the venv and packages yourself. (3) The skill creates persistent files (~/openclaw_python_venv) and temporary images (/tmp/picsee_qr.png) which you may want to remove after use. (4) No environment variables or credentials are requested by the skill itself; however, logging into PicSee via the browser will expose your PicSee session to the agent. If these behaviors are acceptable, the skill is internally consistent with its purpose.

Type: OpenClaw Skill Name: picsee-url-shortener-web Version: 1.0.0 The skill is classified as suspicious due to its use of shell command execution (`bash` scripts) and `pip install` for package management. While these actions are used for the stated purpose of generating QR codes (creating a virtual environment, installing `qrcode` and `pillow` libraries, and saving an image to `/tmp`), they introduce a significant attack surface, including potential supply chain risks via `pip` and the ability to execute arbitrary commands on the host system. There is no clear evidence of malicious intent such as data exfiltration or persistence mechanisms, but the powerful capabilities warrant a 'suspicious' classification.