ClawHub

IMA AI Image & Photo Generator — Poster, Thumbnail, Logo, Art, Illustration, Product & Social Media Graphic Design

v1.0.0

AI image generator and photo generator with SeeDream 4.5, Midjourney, Nano Banana 2, and Nano Banana Pro. Generate AI images for posters, thumbnails, logos,...

⭐ 0· 173·0 current·0 all-time
byDai Shuo@dai-shuo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (image & photo generation) matches the declared requirements (python3, requests) and the code: HTTP calls to IMA APIs and an upload service, model selection, text→image and image→image flows. Requiring IMA_API_KEY as the primary credential is expected.
ℹ
Instruction Scope
Runtime instructions require reading the included SKILL-DETAIL.md and (optionally) cross-skill knowledge files for visual-consistency guidance; the README explicitly instructs agents how to send progress messages. This is within scope for a complex image-generation skill, but notable because the agent is instructed to read local skill-reference files and to not save generation results locally while still supporting uploading local input images.
✓
Install Mechanism
No external install/download steps are present; the skill is instruction- and script-based and only depends on Python and the requests package listed in requirements.txt. No remote arbitrary code downloads or obscure URLs were used.
ℹ
Credentials
Only one credential is declared (IMA_API_KEY), which is appropriate. The code does send that API key to both api.imastudio.com and a separate upload domain (imapi.liveme.com) when uploading local images — this is documented in the code but is a privacy consideration: local images and the API key are used for authenticated uploads to a CDN. The bundle also hardcodes an APP_KEY/APP_ID (marked non-secret in comments) and writes logs/preferences under the user's home directory.
✓
Persistence & Privilege
The skill requests read/write for its own prefs and log directory (~/.openclaw/memory/ima_prefs.json and ~/.openclaw/logs/ima_skills/) and optionally reads other skill references if present. It does not request always:true nor attempt to modify other skills' configs.
Assessment
This skill appears to do what it claims, but review these practical privacy/security points before installing: - The single required secret is IMA_API_KEY. That key will be sent to both api.imastudio.com and imapi.liveme.com (the upload/CDN service) during normal operation. Only provide a key you trust IMA Studio with; do not reuse high-privilege keys for unrelated services. - Image-to-image with local files will upload your local image bytes to the IMA CDN (imapi.liveme.com). If you need to process sensitive images, avoid uploading or confirm the provider's privacy policy. - The skill writes logs and a prefs file under ~/.openclaw. Logs may include filenames, truncated URLs, and status messages. Review or rotate logs if they may contain sensitive info. - The code includes a hardcoded APP_ID/APP_KEY (documented as non-secret) and mentions optional APP_UID/APP_TOKEN env vars in comments; these are not required by the skill as packaged. If you see requests to configure extra environment variables later, treat them as optional and validate why they are needed. - The skill may read optional knowledge files from ~/.openclaw/skills/ima-knowledge-ai/references/* for visual-consistency guidance; this cross-skill read is declared in metadata. If you have sensitive data in other skills' reference folders, be aware of the read scope. If you trust imastudio.com / imapi.liveme.com and are comfortable with uploads of local images and storing logs locally, this skill is proportionate to its stated purpose. If not, consider using a generator with stricter local-only handling or one that documents on-premise operation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dp00hvg71wnmhvk9z96scbx83r620

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binspython3
EnvIMA_API_KEY
Primary envIMA_API_KEY

Comments