Vultr Inference
v1.1.2Generate images and text using Vultr Inference API. Supports Flux image generation and various LLMs for text. Use when user wants to generate images, artwork...
⭐ 0· 109·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Vultr Inference) align with the code and SKILL.md: the script and examples call Vultr inference endpoints and download generated images. The only credential it needs is the Vultr API key stored in ~/.config/vultr/api_key, which is coherent with the stated purpose.
Instruction Scope
Overall instructions stay within scope (call inference endpoints, download images, list models). Minor inconsistencies: SKILL.md examples show using an environment variable ($VULTR_API_KEY) while the setup and included Python/script both read the API key from ~/.config/vultr/api_key; model naming in examples (e.g., flux.1-schnell, stable-diffusion-3.5-medium) differs from some defaults/options in the script (which uses short names like 'flux' and 'flux-pro'). These could cause confusion or errors but are not evidence of malice.
Install Mechanism
Instruction-only with a single helper script; there is no install spec or remote download. Nothing is written to system locations by an installer. Low-risk from installation perspective.
Credentials
The skill only accesses a single local file (~/.config/vultr/api_key) for the Vultr API key which is proportionate to its purpose. Caveats: the README also shows use of an env var ($VULTR_API_KEY) that is not declared as required; the skill expects the key stored in plain text, so users should protect file permissions and ensure the key has minimal privileges.
Persistence & Privilege
Skill does not request always:true, does not modify other skills or global settings, and does not persist beyond reading the API key and writing downloaded images to the current directory. Normal privileges for this kind of helper.
Assessment
This skill appears to do what it says: call Vultr Inference endpoints and download results. Before installing, consider: (1) the API key is read from ~/.config/vultr/api_key (plain text) — restrict that file's permissions (e.g., chmod 600) and ensure the key has only inference permissions; (2) SKILL.md examples also use $VULTR_API_KEY — decide which method you'll use and update docs if needed; (3) the script's default/allowed model names differ from some examples, so verify correct model IDs with your Vultr account if you see 400 errors; (4) generated images are written to the current directory — run the tool in a safe folder if you worry about overwriting files. If you want extra assurance, inspect the script locally (it is short and readable) before enabling autonomous invocation.Like a lobster shell, security has layers — review code before you run it.
latestvk971da5kwxvdff91yzgacfa585834bd5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.