The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses shell commands via curl and jq to interact with the Giphy API. This is the core functional mechanism of the skill and is used as intended.
[COMMAND_EXECUTION]: User-provided search queries are sanitized using jq -sRr @uri for URL encoding before being interpolated into shell commands. This is a critical security measure that prevents command injection attacks from malicious user input.
[EXTERNAL_DOWNLOADS]: The skill connects to Giphy's official API (api.giphy.com) to retrieve GIF metadata. Giphy is a well-known and trusted service, and this network activity is limited to the skill's stated purpose.
[SAFE]: API key management instructions involve using environment variables or local configuration files (~/.openclaw/openclaw.json), which aligns with standard and safe practices for managing secrets in local development environments.
[SAFE]: No evidence of data exfiltration, persistence mechanisms, or obfuscated code was found across the analyzed files.

giphy-gif