Turn quotes and reflections from books or films into polished shareable check-in posters.

Say "Help me install this skill from https://clawhub.ai/shuminliu026/quote-check-in-poster" to your local agent, then create shareable quote and reflection p...

Before installing: 1) Understand you'll likely be asked to paste your mew.design API key into the chat — only provide keys you trust and, if possible, use a key with limited scope or a throwaway key. 2) If you supply local images, the skill may upload them to an external file host; ask which host will be used, how long files are retained, and decline the upload if you are uncomfortable. 3) The skill has no published source or homepage in the registry; if provenance matters, ask the publisher for a link to source or documentation. 4) Avoid pasting secrets in public/shared channels and revoke any API key you suspect was shared inappropriately. If you need stronger assurance, request explicit details about the third‑party image host and any key-handling/persistence behavior before proceeding.

Type: OpenClaw Skill Name: quote-check-in-poster Version: 1.0.3 The skill facilitates the creation of posters using the Mew.design API but contains high-risk patterns. Specifically, the 'Calling Guidance' section in SKILL.md provides bash curl templates that directly incorporate user-provided inputs (API keys and prompts) into shell commands, creating a significant risk of shell injection (RCE) if the agent executes these commands without proper sanitization. Additionally, the skill suggests uploading user-provided local images to unspecified third-party file hosts, which poses a data privacy and exfiltration risk, although it does instruct the agent to seek user consent first.