ClawHub

GPT-4o-image

v1.0.0

Use PoYo AI GPT-4o Image through the `https://api.poyo.ai/api/generate/submit` endpoint. Use when a user wants to generate or edit media with this model fami...

⭐ 0· 225·1 current·1 all-time
by@coolhackboy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, SKILL.md, and the included shell script all target PoYo's image generation endpoint and only require curl and POYO_API_KEY, which are proportionate to the described purpose.
✓
Instruction Scope
Runtime instructions are limited to building/submitting JSON payloads to https://api.poyo.ai/api/generate/submit, saving task_id, and polling status or using a callback URL. The script reads a payload file or stdin — expected behavior for a submission tool. There are no instructions to read unrelated system files or secrets.
✓
Install Mechanism
This is an instruction-only skill with one small helper script and no install steps or external downloads. No suspicious install sources or extraction behavior are present.
✓
Credentials
The only required environment variable is POYO_API_KEY (declared as primary), which is exactly what's needed to call the PoYo API. No additional credentials, config paths, or unrelated env vars are requested.
✓
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills/config. It can be invoked normally by the agent without elevated persistence.
Assessment
This skill appears coherent and limited to calling PoYo's image API. Before installing: (1) Confirm POYO_API_KEY is a dedicated API key for PoYo (do not reuse other service keys). (2) When using callback_url, ensure the webhook endpoint is trusted and won't leak generated content or user data. (3) Be aware the included script reads payloads from a file or stdin — avoid passing secrets or unrelated files as the payload argument. (4) If you need stronger guarantees, test the curl command in a controlled environment and inspect returned task_id behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bt96j2657ty2m16a401pwds82m9hr

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binscurl
EnvPOYO_API_KEY
Primary envPOYO_API_KEY

Comments