Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

seedream-img-gen

v1.0.0

This skill should be used when the user wants to generate images using Seedream, the image generation model from ByteDance on Volcengine platform. Triggers i...

1· 57·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's name, description, SKILL.md and code all describe generating images via Volcengine/Seedream, which matches the requested capabilities. However, the registry metadata declares no required environment variables or primary credential, while both SKILL.md and scripts/generate_image.py clearly require an ARK_API_KEY (or VOLCENGINE_API_KEY). This mismatch between declared requirements and actual runtime needs is an incoherence.
Instruction Scope
SKILL.md stays within the image-generation domain: it instructs setting ARK_API_KEY, installing the Volcengine SDK or OpenAI compatibility package, and running the bundled script or using inline code. It references a user-local path (~/.workbuddy/skills/seedream-image-gen/scripts/generate_image.py) that does not exactly match the package slug/name in metadata (seedream-img-gen) — a path/name mismatch that can confuse installation and runtime. Instructions do not ask for unrelated files or other credentials and do not appear to exfiltrate data.
Install Mechanism
This is an instruction-only skill with bundled script; there is no install spec that downloads or extracts remote archives. SKILL.md recommends installing Python packages via pip (volcengine SDK or openai), which is reasonable for a Python script. No high-risk download URLs or extraction steps are present.
!
Credentials
The runtime code and documentation require an API key in ARK_API_KEY (or VOLCENGINE_API_KEY) to call the Volcengine endpoint, but the package metadata declares no required env vars or primary credential. That omission is problematic because users may not realize they must provide a credential, and the metadata does not warn about sensitive data use. Aside from the API key, no other secrets are requested.
Persistence & Privilege
The skill does not request persistent or elevated platform privileges (always is false). It does not modify other skills or system-wide settings. Autonomous invocation is allowed by default but is not combined with other high-risk factors here.
What to consider before installing
This skill otherwise looks like a straightforward Volcengine/Seedream image generator, but there are a few things to check before installing or running it: - The script requires an API key: SKILL.md and scripts/generate_image.py expect ARK_API_KEY (or VOLCENGINE_API_KEY) in the environment. The registry metadata incorrectly declares no required env vars — treat that as an omission and only provide an API key you trust the skill should use (i.e., purpose-limited or revocable key). - Verify the path/name: examples reference ~/.workbuddy/skills/seedream-image-gen while the registry slug is seedream-img-gen. Confirm you are running the bundled scripts from the repository you installed to avoid running an unexpected copy. - Review the bundled script yourself (scripts/generate_image.py) before running. It makes network calls only to Volcengine endpoints and downloads returned image URLs. Ensure you are comfortable with the SDKs it recommends (volcengine-sdk or openai-compatible client) and install those in an isolated environment (virtualenv). - Be cautious with the --output path you pass to avoid writing files to sensitive locations. The script will download any URL returned by the API — if you have concerns, run it in a sandbox or inspect API responses before auto-downloading. - If you need higher assurance, ask the publisher for corrected metadata that declares ARK_API_KEY as a required env var and clarifies the exact install path, or request an origin/source (homepage/author) so you can verify provenance. Confidence is medium because the code and docs are consistent with the described purpose, but the metadata omissions and path/name mismatches are unexplained and merit user attention before trusting credentials or running the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk974zaw3yyf3acfap0tmev6ep983nv30

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments