Seedream
v0.1.0使用火山引擎 Seedream-4.5 API 生成高质量图片。适用于文生图、图生图以及生成关联组图的场景。
⭐ 1· 1.6k·11 current·11 all-time
byYu Xie@crabfishxy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description, SKILL.md and the Python script all consistently implement image generation via Volcengine Seedream (text->image, image->image, sequential group generation). The network endpoint, parameters, and API key usage align with the stated purpose.
Instruction Scope
Runtime instructions are limited to invoking the provided script with a prompt, optional image input, and an API key (or VOLC_API_KEY). The script makes a single POST to the Volcengine images endpoint and prints MEDIA_URL lines. It does not read unrelated files or exfiltrate additional data.
Install Mechanism
No install spec; this is instruction-only plus a single script. The script lists 'requests' as a dependency in comments but doesn't perform any external downloads or install arbitrary code. This is low-risk for installation.
Credentials
The skill reasonably requires a Volcengine API key (accepted via --api-key or VOLC_API_KEY). However, the registry metadata lists no required env vars or primary credential whereas SKILL.md and the script reference VOLC_API_KEY — a metadata omission that should be corrected so users know what secret is needed.
Persistence & Privilege
always is false and there is no installation step that modifies other skills or system-wide settings. The skill does not request persistent elevated privileges.
Assessment
This skill appears to do what it claims: call Volcengine Seedream to generate images. Before installing: (1) be prepared to supply your Volcengine API key (the script accepts --api-key or uses VOLC_API_KEY); the skill's metadata does not currently declare that env var, so assume you'll need to provide it. (2) Do not include sensitive data in prompts or reference images you don't want sent to the external API — the script uploads prompt text and optional image data to Volcengine's endpoint. (3) Ensure the 'requests' Python dependency is available in your environment. (4) If you need stricter controls, ask the author to add requires.env/primary credential info to the registry metadata, provide a homepage or source URL, and document data-retention/privacy for generated images.Like a lobster shell, security has layers — review code before you run it.
latestvk97eed7gn51q8t1qzwz3qqzwkx818j1t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.