Reve AI Image Generation
v1.0.2Generate, edit, and remix images using the Reve AI API. Use when creating images from text prompts, editing existing images with instructions, or combining/remixing multiple reference images. Requires REVE_API_KEY or REVE_AI_API_KEY environment variable.
⭐ 1· 2.3k·0 current·0 all-time
by@dpaluy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description (image generation, edit, remix) align with the included script and SKILL.md. However the registry metadata lists no required environment variables or primary credential while the SKILL.md explicitly requires REVE_API_KEY or REVE_AI_API_KEY — an inconsistency that should be resolved.
Instruction Scope
SKILL.md instructions are scoped to generating, editing, and remixing images via the Reve API, and describe only reading input image files and writing output files. They require a Bun runtime and an API key and do not request unrelated system files or services in the prose.
Install Mechanism
No install spec is provided (instruction-only install), which minimizes installer risk. The script requires Bun to run; the Bun requirement is mentioned in SKILL.md but not surfaced in registry requirements. The included TypeScript script (scripts/reve.ts) will be executed by Bun and can perform network I/O — review its contents before running.
Credentials
The skill logically needs one API key (REVE_API_KEY or REVE_AI_API_KEY), which is proportionate. However the registry metadata declares no required env vars or primary credential while SKILL.md requires an API key — this mismatch means automated permission and credential controls may not be correctly applied. The code file should be inspected to confirm it only reads the stated API key and no other secrets or environment variables.
Persistence & Privilege
The skill does not set always:true and there is no explicit disableModelInvocation flag. Default behavior likely allows model-initiated invocation. This is reasonable for a user-invoked image-generation tool, but if you do not want the model to call the skill autonomously, consider requiring disableModelInvocation or user invocation controls.
What to consider before installing
The skill's purpose (call Reve AI to generate/edit images) matches the documentation and bundled script, but the registry metadata omits the required API key declaration and Bun runtime requirement — this mismatch can hide what credentials/tools will be used. Before installing: (1) inspect scripts/reve.ts to confirm it only uses REVE_API_KEY or REVE_AI_API_KEY and does not access other env vars or unexpected endpoints; (2) run it in a sandbox or isolated environment with a test API key and non-sensitive images; (3) ensure Bun is installed from an official source; (4) if you do not want the model to call the skill autonomously, enable disableModelInvocation or require explicit user invocation; (5) prefer skills with a visible homepage/source and clearer metadata. If you cannot inspect the code, treat this skill as higher risk and avoid providing production credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk9745fmw6xfnn546a0tzt92fbd7zyb76
License
MIT-0
Free to use, modify, and redistribute. No attribution required.