pollinations-sketch-note

What to check before installing: - Inspect and edit DEFAULT_OUTPUT_DIR in scripts/generate.py: it is set to /Users/pengshengkai/.openclaw/media (a hardcoded username). Change it to a safe location (e.g., Path.home()/'.openclaw/media' or a configurable path) to avoid files being written to an unexpected absolute path. - Confirm you trust the Pollinations and Tavily API endpoints and that your API keys are from trusted accounts. The script sends your Pollinations key as a request parameter to https://gen.pollinations.ai/image/{prompt} and fetches page content via https://r.jina.ai/..., so expect outgoing network traffic to those hosts. - The package manifests mention 'curl' and other system dependencies, but the script uses Python requests; this is probably harmless but inconsistent—no installer will pull extra binaries automatically, but the docs mention installing requests and pillow. - Run the script in an isolated environment (virtualenv/container) and with dummy or scoped API keys first if possible, to observe behavior. - If you intend to allow the skill to run autonomously, be mindful that it will make outbound HTTP requests whenever invoked; consider network monitoring or restricting keys to minimal scopes. - If anything feels unexpected (unknown endpoints, unexplained file writes), don't provide real API keys until you are satisfied with changes and testing.