ClawHub

OATDA Generate Image

v1.0.6

Generate images from text descriptions using AI models through OATDA's unified API. Triggers when the user wants to generate, create, or produce AI images, a...

⭐ 0· 49·0 current·0 all-time
by@devcsde
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (image generation via OATDA) match the actual requirements: curl + jq for HTTP and JSON handling, an OATDA API key, and a credentials file for fallback. The listed model providers are plausible for a unified API proxy.
✓
Instruction Scope
SKILL.md only instructs the agent to read the declared credentials file or env var, call OATDA endpoints to list models or generate images, and handle common HTTP errors. It does not direct reading unrelated paths or exfiltrating unrelated secrets.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk install surface. It relies on standard system tools (curl, jq) already declared.
✓
Credentials
Only one credential (OATDA_API_KEY) is required and declared as primary; the credentials file (~/.oatda/credentials.json) is explicitly listed and used as a fallback. No unrelated secrets or multiple service credentials are requested.
✓
Persistence & Privilege
Skill is user-invocable, not always-enabled, and does not request persistent or elevated platform privileges.
Assessment
This skill appears coherent for calling OATDA's image API, but before installing: (1) verify you trust https://oatda.com and its published docs because your API key will be used there; (2) ensure your ~/.oatda/credentials.json is stored with appropriate filesystem permissions (it contains your API key); (3) prefer setting OATDA_API_KEY in the environment rather than leaving a long-lived key file if you have security concerns; (4) be aware that providing public URLs for file-type params exposes those files to the provider; and (5) confirm the endpoint domain matches official docs and that you’re comfortable with the service’s content and privacy policies.

Like a lobster shell, security has layers — review code before you run it.

latestvk972c1kr2akmf8yz226rgbmp9n845npy

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎨 Clawdis
Binscurl, jq
EnvOATDA_API_KEY
Config~/.oatda/credentials.json
Primary envOATDA_API_KEY

Comments