WaveSpeedAI Face Swapper

Swap faces in images and videos using WaveSpeed AI. Supports image face swap and video face swap with multi-face targeting. Produces watermark-free results w...

This skill's instructions require you to provide a WAVESPEED_API_KEY and to upload images/videos (sensitive personal data) to a third-party service, but the public metadata does not declare that credential—ask the publisher to clarify and correct the manifest before installing. Steps to consider before using: 1) Verify the skill's source and homepage and confirm wavespeed.ai is legitimate and its privacy/retention policy; 2) Ask the author to add required env vars and any dependency/install steps to the manifest (e.g., the 'wavespeed' npm package); 3) Don't provide your production API keys until you trust the publisher—use a limited/test key instead; 4) Be aware of legal/ethical risks from face-swapping (consent, deepfakes); 5) Test with non-sensitive images first and confirm where uploaded files are stored and who can access outputs.

Type: OpenClaw Skill Name: wavespeed-face-swapper Version: 1.0.0 The skill's purpose is benign, offering face-swapping functionality via the WaveSpeed AI service. It requires an API key and uses standard methods for handling local file uploads and remote URL processing. The `SKILL.md` documentation includes explicit 'Security Constraints' that warn against arbitrary URL loading and emphasize input validation, instructing the AI agent to use the skill securely. While the underlying capabilities (uploading local files, fetching remote URLs) could be misused if the agent or user provides untrusted input, the skill itself does not exhibit malicious intent or contain prompt injection attempts designed to exploit these capabilities; instead, it actively advises against such misuse.