Agent Economy ReportAgent Economy ReportCAUTION version 1.0.4 · audited 2026-09-09
This is a documentation-only skill: eight Markdown files of advice about choosing image formats, resizing, cropping, compressing, handling metadata, and meeting web/social/ecommerce/print/accessibility export requirements. It contains no scripts, no code that runs on install, no environment-variable or credential access, and no network calls of its own — the only URLs are the publisher's ClawHub page and a homepage link. It does suggest concrete command-line examples the agent might run: ImageMagick, Pillow (Python), sips, exiftool, ffmpeg, and two `npx` invocations (svgo, sharp), which fetch and execute packages from the npm registry. A few of the suggested commands modify files in place (`mogrify -format ... *.jpg`, `exiftool -all= -overwrite_original`), so an agent following them literally could overwrite originals across a directory. The skill itself flags both risks and tells the user to prefer new output paths and to run `npx` examples only in trusted environments. Nothing in the package attempts to read secrets, exfiltrate data, persist itself, or redirect payments.
| Declared purpose | Guidance for creating, inspecting, processing, and optimizing image files: format choice, resizing, compression, color profiles, metadata, and platform-specific export checks (web, social, ecommerce, photography/print, branding, screenshots, accessibility). |
| Observed behavior | Purely instructional Markdown. It routes the agent to topic-specific reference files and provides shell/Python command examples using local image-processing tools. No hidden endpoints, no obfuscation, no data collection, no install hooks. Behavior matches the declared purpose. |
| Verdict, rules only | SAFE |
| Verdict, AI | CAUTION |
| Final verdict | CAUTION (never better than either pass) |
| capability | vs purpose | detail |
|---|---|---|
| shell | needed | Documents bash commands for ImageMagick (`magick`, `mogrify`, `identify`), `sips`, `exiftool`, and `ffmpeg` (commands.md lines 9-42, 99-132). Required to actually process images, but includes in-place/overwriting variants. |
| install_packages | exceeds purpose | Two `npx` examples (`npx svgo`, `npx sharp`) at commands.md lines 33 and 110-111 fetch and execute packages from the npm registry. Convenient but not strictly necessary; the skill itself labels this as remote code execution (line 144). |
| filesystem_read | needed | Command examples read local image files (e.g. `Image.open("input.jpg")`, commands.md line 58). |
| filesystem_write | needed | Examples write outputs and, in some cases, overwrite sources in place (`mogrify` line 40, `exiftool -overwrite_original` lines 121-122). |
| network | exceeds purpose | No network calls in code. Only two informational URLs: clawic.com (SKILL.md line 5) and clawhub.ai (skill-card.md line 7). |
| severity | finding |
|---|---|
| low | Suggested command downloads and executes an npm package `npx` fetches the named package from the public npm registry and runs it. An agent that executes this without review is performing remote code execution from a third-party registry. Reasonable for SVG optimization, but a supply-chain surface the operator should be aware of. commands.md:33 npx svgo input.svg -o output.svg |
| low | Second npx example fetches a package at runtime Same download-and-execute pattern as the svgo example. No pinned version, so whatever is currently published under that name is executed. commands.md:110 npx sharp input.jpg --resize 1600 --webp quality=80 -o output.webp |
| info | Skill discloses the npx risk itself The package explicitly warns about the remote-execution nature of its own npx examples, which is a mitigating factor rather than a defect. commands.md:144 Treat `npx` examples as remote-code execution from the package registry and use them only in trusted environments. |
| low | Batch command operates on every matching file in the directory `mogrify` with a wildcard processes all JPEGs in the working directory and, unlike `magick`, modifies files in place. An agent running this in the wrong directory could alter or degrade many unrelated images. commands.md:40 mogrify -format webp -quality 80 *.jpg |
| low | Suggested command destroys metadata in place with no backup `-overwrite_original` removes exiftool's usual backup copy, making the metadata strip irreversible. Legitimate for privacy scrubbing, but destructive if applied to a master file. commands.md:122 exiftool -all= -overwrite_original input.jpg |
| info | Skill advises non-destructive practice The package counsels against overwriting originals, partially offsetting the destructive command examples above. commands.md:143 Prefer writing outputs to a new path instead of overwriting the only good source. |
| info | External homepage reference Informational link only; no code fetches from this domain. The skill makes no outbound network requests of its own. SKILL.md:5 homepage: https://clawic.com/skills/image |
| info | Suggests installing related skills, gated on user confirmation Recommends five other skills by the registry's own installer and explicitly conditions it on user confirmation. Promotional but not coercive, and it does not bypass consent. SKILL.md:170 Install with `clawhub install <slug>` if user confirms: |
0 AI finding(s) were dropped because their file, line or quote did not match the package.
| domain | service rating | where |
|---|---|---|
| clawhub.ai | not in the service index | skill-card.md:7 |
| clawic.com | not in the service index | SKILL.md:5 |
| Binaries invoked | bash, npx, python |
| Environment variables read | none |
| Hard-coded wallets | none |
| Pipes a download to a shell | 0 |
| eval / exec / subprocess | 0 |
| base64 blobs | 0 |
| File writes | 0 |
| Persistence | 0 |
| file | lines | sha256 |
|---|---|---|
SKILL.md | 180 | b51263826ed06bad… |
_meta.json | 6 | 2e2256c300cb6bcd… |
accessibility.md | 53 | 9207daaf45ff17b3… |
branding.md | 52 | b00ac1616b847d60… |
commands.md | 144 | 7fccf6f13bfd60d2… |
ecommerce.md | 60 | d5daf902e2fc0390… |
photography.md | 70 | 419bbf2ec3ef38e8… |
screenshots.md | 48 | 794f3c03d4443654… |
skill-card.md | 43 | 436da4b9a23064c6… |
social.md | 50 | 68612b55aa18d14b… |
web.md | 106 | b2d366affae1789a… |
For agents
JSON: https://agenteconomy.report/k/image.audit.json · badge: https://agenteconomy.report/k/image.audited.svg ·
skill rating: /k/image · commission an audit of any skill: US$ 29 per version.
The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).