ClawHub

IMA AI Creative Content Generator — Image, Video, Music, Ad, Marketing, Social Media Content Creation

v1.0.1

All-in-one AI content generator for creative, marketing, and social media content creation. AI image generator with SeeDream 4.5, Midjourney, Nano Banana 2/P...

⭐ 0· 124·0 current·0 all-time
byDai Shuo@dai-shuo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (multimodal AI content generation) align with required items: python3, requests, and a single API key (IMA_API_KEY). The script talks to imastudio endpoints and upload services that match the described functionality (product list, task create, local-image upload).
ℹ
Instruction Scope
SKILL.md requires reading SKILL-DETAIL.md before first use and optionally reading ima-knowledge-ai references when installed. These reads are declared in instructionScope and are consistent with the skill’s need for product/model tables and workflow guidance. The mandatory 'read full SKILL-DETAIL.md' is a usability requirement (not a secret-exfiltration directive) but does grant the skill permission to read its own included documentation fully.
✓
Install Mechanism
No install spec is provided; the skill is instruction + included Python scripts. Required runtime (python3) and package (requests) are reasonable and proportionate. No downloads from untrusted URLs or archive extraction occur during install.
✓
Credentials
Only one credential (IMA_API_KEY) is required and declared as the primary credential. The code uses that key for api.imastudio.com and (when uploading local images) imapi.liveme.com, which the docs explicitly state. No unrelated secrets or broad cloud credentials are requested.
ℹ
Persistence & Privilege
The skill writes per-user preferences and logs under ~/.openclaw (declared in persistence). It does not require always:true and does not modify other skills. Logs may contain operational details (but do not appear to store the API key). The skill may optionally read ima-knowledge-ai reference files if that skill is installed (this cross-skill read is declared and optional).
Assessment
This skill appears to do what it says: it runs Python scripts that call api.imastudio.com and (for local file uploads) imapi.liveme.com and then uploads binaries to presigned CDN hosts. Before installing or using it: 1) Only provide a dedicated IMA_API_KEY with limited scope (so you can revoke/regenerate it easily if needed). 2) Review SKILL-DETAIL.md and SECURITY.md (the skill requires you to read them) to confirm model IDs, upload behavior, and cost rules. 3) Be aware that local images are uploaded to a CDN via presigned URLs (the API key is sent to imapi.liveme.com during the upload-token step as documented). 4) Logs and a small prefs file are stored under ~/.openclaw — if that is sensitive, clear or relocate them. 5) If you do not trust api.imastudio.com or the imapi.liveme.com upload service, do not supply your API key. 6) Use network monitoring or a scoped API key on first run if you want to verify exact network behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk97farvb5e1djtwj3hjvcf96cn83secy

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binspython3
EnvIMA_API_KEY
Primary envIMA_API_KEY

Comments