ClawHub

SMTools Image Generation Skill

v1.9.1

Generate images from text prompts using AI models via OpenRouter, Kie.ai, or YandexART. Use when the user asks to generate, create, draw, or illustrate an im...

⭐ 0· 264·1 current·1 all-time
bySergey Mikhaylov@bzsega
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the code and runtime behavior: the skill implements OpenRouter, Kie.ai, and YandexART providers and only requires python3 and provider API keys. The presence of provider implementations in scripts aligns with the declared purpose. Minor inconsistency: the SKILL.md frontmatter lists only KIE_API_KEY in optionalEnv but the skill also supports Yandex envs (YANDEX_IAM_TOKEN / YANDEX_FOLDER_ID) in code and docs.
ℹ
Instruction Scope
Runtime instructions are scoped to generating or editing images. However, when using the editing mode (-i), the skill will read any local file path provided and embed/read it (OpenRouter encodes the file to base64 and sends it; Kie expects a URL and the code will include the provided value). That means local images are uploaded to external provider APIs — the SKILL.md does not explicitly warn users that passing a local path will upload the file. The config loader also reads a .env file and populates environment variables (no exfiltration in code), and all external calls go to the stated provider endpoints.
ℹ
Install Mechanism
There is no platform install spec; installation is via provided setup.sh which installs dependencies via pip into a vendor directory and a venv (only requests is in requirements.txt). This is expected for a Python skill. Issues to note: scripts/check.sh expects a 'dotenv' import but requirements.txt does not include python-dotenv, so dependency checks may report missing 'dotenv' even after running setup.sh. setup.sh writes files under the skill directory (config.json, .env template, output/) which is normal but should be reviewed before running.
ℹ
Credentials
PrimaryEnv is OPENROUTER_API_KEY which matches the default provider. Optional provider keys (KIE_API_KEY and YANDEX_IAM_TOKEN/YANDEX_FOLDER_ID) are used only for their respective providers. This is proportionate to the functionality. Minor mismatch: the SKILL.md frontmatter's optionalEnv only lists KIE_API_KEY and omits the Yandex env vars that the code requires if YandexART is selected.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and only writes files inside its own skill directory (config.json, .env template, output images). Agent invocation settings are defaults (user-invocable and can run autonomously).
Assessment
This skill appears to do what it claims, but review these points before installing: - Only provide API keys for providers you trust. OPENROUTER_API_KEY is required for default use; KIE and Yandex keys are optional and only used when you explicitly select those providers. - Using the -i / edit option will read the given local file and send its contents to the external provider (base64 upload or provider-specific task). Do not pass sensitive local files unless you consent to uploading them. - The provided setup.sh installs packages from PyPI and creates files under the skill directory (config.json, .env template, output/). Inspect setup.sh if you prefer to run in an isolated environment or a controlled virtualenv. - There is a minor packaging/doc mismatch: check.sh looks for a 'dotenv' module but requirements.txt only lists 'requests' — expect the dependency check to warn about missing dotenv. You may need to install python-dotenv or adjust the scripts if you rely on .env parsing semantics. - If you plan to enable autonomous invocation for this skill in an agent, be cautious about granting it the ability to generate or edit images that include content from local files or to use your provided API keys without supervision.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e6e7gdpwhctc7b5bgfahqcs82z70w

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binspython3
EnvOPENROUTER_API_KEY
Primary envOPENROUTER_API_KEY

Comments