IMA AI Image Generator & Photo Generator — Poster, Thumbnail, Logo, Art, Illustration, Product & Social Media Graphic Design
v1.0.13Use when the user needs image generation or image transformation through the IMA Open API, including text-to-image, image-to-image, style transfer, or refere...
⭐ 0· 792·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code and runtime: python3, requests, and an IMA API key are exactly what an image-generation client that talks to api.imastudio.com and an upload host would need. Required binaries and env vars are proportional to the stated purpose.
Instruction Scope
Runtime instructions and scripts perform live catalog queries, task creation, and (for local files) uploads to imapi.liveme.com. The doctor/setup run network checks and spawn the CLI with the IMA_API_KEY in the environment. The runtime also reads an optional cross-skill reference path if another skill is installed. These behaviors are expected for this skill but mean: (1) local images will be uploaded to a third-party host under IMA Studio's control, and (2) operational logs and possibly prompts/URLs may be recorded locally.
Install Mechanism
No opaque download or remote binary is embedded. A requirements.txt lists only 'requests'. The included setup script can optionally run pip install -r requirements.txt (normal pattern). No extract-from-arbitrary-URL or IP-hosted binary downloads are present in the repository files examined.
Credentials
Only a single credential (IMA_API_KEY) is required and used by the client and doctor; that matches the declared primaryEnv. The code passes the key to api.imastudio.com and to imapi.liveme.com when uploading local images — this is documented in SECURITY.md and is coherent with the skill's purpose.
Persistence & Privilege
The skill writes preferences and logs under ~/.openclaw (ima_prefs.json and ~/.openclaw/logs/ima_skills/). Logs are claimed auto-deleted after 7 days; preferences persist until user deletion. The skill is not always-enabled and doesn't modify other skills' configurations, but it optionally reads cross-skill reference files if present.
Assessment
This skill appears to do what it says: it needs IMA_API_KEY, uses python3 and requests, queries the live product/catalog API, and uploads local images to IMA endpoints. Things to consider before installing: (1) Use a scoped or test IMA_API_KEY rather than a broadly privileged key when you try it. (2) Any local input images will be uploaded to imapi.liveme.com (an IMA Studio host) — don't upload sensitive images. (3) Operational logs and generation metadata are stored under ~/.openclaw/logs/ima_skills/ (and preferences in ~/.openclaw/memory/ima_prefs.json); review or clear those if they might contain sensitive prompts or filenames. (4) The doctor/setup invoke the CLI in a subprocess and propagate the API key via environment variables for smoke tests — this is expected but keep key scope limited. If you need greater assurance, review the omitted code sections for how uploads are performed and verify that logs never include the raw API key.Like a lobster shell, security has layers — review code before you run it.
latestvk97cm0rt5n4qwszr3332875cs584tmmy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3
EnvIMA_API_KEY
Primary envIMA_API_KEY