GLM-Image-Gen
v1.0.3Official skill for generating high-quality images from text prompts using ZhiPu GLM-Image API. Excellent at scientific illustrations, high-quality portraits,...
⭐ 1· 360·0 current·0 all-time
byJared Wen@jaredforreal
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binaries (python), and required env var (ZHIPU_API_KEY) align with a text→image client for ZhiPu GLM-Image. The script calls the official bigmodel endpoint and the allowed model choices and size limits match the skill purpose.
Instruction Scope
SKILL.md instructs the agent to run the included python script and not to use other generation methods (consistent). One small mismatch: SKILL.md states 'Disable watermark (requires signed disclaimer)', but the script accepts --no-watermark without enforcing or verifying any disclaimer. SKILL.md suggests optionally sending images to Feishu via a messaging tool; the skill does not request Feishu credentials (that would rely on the platform's messaging capability), so that is an external action the integrator should confirm separately.
Install Mechanism
No install spec (instruction-only plus one included script). Nothing is downloaded or written by an installer; the skill relies on an existing python binary. Low install risk.
Credentials
Only one required environment variable (ZHIPU_API_KEY) is declared and used. The script reads no other secrets or config paths. Requesting a single provider API key is proportionate to the stated functionality.
Persistence & Privilege
always is false, the skill does not request permanent platform presence or modify other skills/configs. It prints/saves generated images to user-specified paths only.
Assessment
This skill appears to do what it claims: it runs a bundled Python CLI that calls the official ZhiPu GLM-Image endpoint and needs a ZHIPU_API_KEY only. Before installing, confirm you are comfortable sharing a single ZHIPU_API_KEY across skills (it will be reused if you put it in a global config), and avoid pasting that key into public places. Note the script allows --no-watermark but does not itself enforce any signed-disclaimer process the README mentions—if you need legal guarantees about watermark removal, verify that out-of-band. Finally, if you plan to have the agent automatically send images to third-party channels (e.g., Feishu), confirm the platform/tool has the appropriate permissions and you understand where images (temporary URLs) will be posted or stored.Like a lobster shell, security has layers — review code before you run it.
latestvk976tcasxe3y94tbvemw7347t183khh9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎨 Clawdis
Binspython
EnvZHIPU_API_KEY
Primary envZHIPU_API_KEY