meme-maker
What this skill does
Meme generation tool that allows users to search for meme templates, suggest meme formats, and generate local or hosted image memes using either a local rendering approach or the Imgflip API.
github/openclaw - Data Exfiltration - 385.8k stars
Threat analysis
Skill info
pkg:github/openclaw/openclaw@c39abce?skill=meme-makerAssessments (1)
Data Exfiltration
Data Exfiltration via local-llm-review
scripts/meme.mjs
The script uses the Imgflip API (`IMGFLIP_CAPTION_URL`) which requires `IMGFLIP_USER` and `IMGFLIP_PASS` environment variables. If these credentials are not properly secured, they could be exposed andBadge
Add the Anomity scan badge for meme-maker to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of meme-maker? Report an issue or request a rescan.
