ClawHub

imini-imagegen

v1.0.3

Use this skill when the user wants to generate raster images through the imini image generation API, including text-to-image and image-guided generation with...

⭐ 1· 66·0 current·0 all-time
by@horseson2018
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, SKILL.md, references, and the bundled Python script all describe and implement the same behavior (POST /v1/images/generate, poll task, download images). Required items (python3 and IMINI_IMAGE_API_KEY) are appropriate and proportional.
ℹ
Instruction Scope
Runtime instructions are scoped to collecting prompts/options and running the bundled script. The script only reads declared env vars and performs API calls to the documented base URL and subsequent downloads of image URLs. Note: the script will fetch whatever image URLs are provided (user-supplied reference URLs and result image URLs), so it will perform network downloads; this is expected but means it can contact arbitrary hosts provided by inputs.
✓
Install Mechanism
No install spec (instruction-only with a bundled script) — nothing is downloaded or installed at install time, which is low-risk.
✓
Credentials
Only IMINI_IMAGE_API_KEY is required (with optional IMINI_IMAGE_API_BASE_URL/timeout/poll env vars). The requested env vars match the documented API usage and are proportionate to the skill's function.
✓
Persistence & Privilege
always:false and no special config paths. The agents/openai.yaml enables implicit invocation (allow_implicit_invocation:true), which permits autonomous use by agents — this is common for skills and not by itself a red flag, but be aware agents may call the skill without explicit manual invocation.
Assessment
This skill appears to do exactly what it says: it needs a single API key (IMINI_IMAGE_API_KEY) and python3, calls the imini API, polls for results, and downloads image files. Before installing: (1) do not put real keys into the skill directory or repo — set the env var in your runtime environment only; (2) confirm you trust the imini API host (default base URL is https://openapi.imini.ai/imini/router); (3) be aware the skill will download image URLs (both user-supplied references and returned result URLs), so it will make outward network requests — avoid passing internal/private URLs you don't want fetched; (4) if you do not want agents to call this skill autonomously, remove or modify the implicit-invocation setting in your agent configuration. If you want extra assurance, review the remainder of the bundled script (the truncated portion) to confirm downloads and logging behave exactly as you expect.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cwrzn03e13f507f7dvgwbcs84f26m

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
Binspython3
EnvIMINI_IMAGE_API_KEY
Primary envIMINI_IMAGE_API_KEY

Comments