Doubao Image

WarnAudited by ClawScan on May 10, 2026.

Overview

The skill is inconsistent about what it does and which provider it uses, and its script sends an API key to a different image-generation service than the Zhipu web-search service described.

Review carefully before installing. The artifacts conflict between Zhipu web search, Zhipu image search, and Doubao/Volces image generation. Do not provide an API key unless the maintainer clarifies the intended provider, endpoint, credential type, and exact behavior.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI09: Human-Agent Trust Exploitation

What this means

A user may install or invoke this expecting web search, but the skill may instead make unexpected image-generation API calls.

Why it was flagged

The main documentation frames the skill as Zhipu web search using the BigModel endpoint, but the included runnable script uses a different provider and performs image generation.

Skill content

description: Use Zhipu (智谱) web search API for searching the internet... Official: `https://open.bigmodel.cn/api/paas/v4/chat/completions`

Recommendation

Do not rely on this skill until its name, description, instructions, script, and endpoint all consistently describe the same provider and function.

High

#ASI03: Identity and Privilege Abuse

What this means

If a user follows the Zhipu setup instructions, their API key could be sent to an unexpected provider endpoint.

Why it was flagged

The script sends the DOUBAO_API_KEY as a bearer token to a Volces/Doubao image-generation endpoint, while the documentation tells users to get a Zhipu/BigModel key and the registry declares no primary credential.

Skill content

curl ... "https://ark.cn-beijing.volces.com/api/v3/images/generations" \
  -H "Authorization: Bearer $KEY"

Recommendation

Use a provider-specific credential name, declare it in metadata, and ensure credentials are only sent to the provider documented for the skill.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

The agent could spend API quota or perform the wrong action when the user only asked for information lookup.

Why it was flagged

The runnable script is an image-generation API call, not a web-search workflow, despite the skill being described as useful for search, latest news, and current information.

Skill content

model: "doubao-image-v1",
        prompt: $prompt
...
"https://ark.cn-beijing.volces.com/api/v3/images/generations"

Recommendation

Separate the web-search and image-generation skills, and make the agent instructions restrict each tool to the exact matching user request.