test-should-be-removed

AI image generation, editing, and background removal API via Bria.ai — authenticates via OAuth device flow and caches credentials in ~/.bria/credentials, the...

This skill appears to do what it claims: call Bria.ai image APIs using curl and a Bria API key, caching tokens in ~/.bria/credentials. Before installing, consider: 1) You must provide BRIA_API_KEY and allow the skill to read/write ~/.bria/credentials — ensure the file is stored with restrictive permissions and rotate the key if needed. 2) The helper script base64-encodes local image files into temporary files under /tmp (it attempts to delete them afterward) — be aware of sensitive image data and that abrupt termination could leave remnants. 3) The SKILL.md excerpt is truncated in places (device authorization request lacks visible parameters), so review the full authentication flow to ensure it uses the official Bria endpoints and does not leak codes or tokens elsewhere. 4) Only install if you trust the skill source; if unsure, test in an isolated environment, use a limited-scope API key, and inspect any full/remaining SKILL.md or scripts before granting credentials.

Type: OpenClaw Skill Name: test-should-be-removed Version: 0.0.2 The bria-ai skill bundle is a legitimate integration for the Bria.ai image generation and editing service. It implements a standard OAuth2 Device Authorization flow to manage credentials securely in ~/.bria/credentials and provides a helper script (bria_client.sh) to interact with the official Bria API (engine.prod.bria-api.com). While the metadata contains a future-dated timestamp and a 'test' slug, the code logic and instructions in SKILL.md are consistent with the stated purpose of image processing and do not exhibit signs of malicious intent or unauthorized data exfiltration.