ImaginePro AI Image Generation API

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward ImaginePro API wrapper, but it uses your API key, consumes service credits, and sends prompts or image URLs to ImaginePro.

Install only if you intend to let your agent use ImaginePro. Keep the API key limited to trusted sessions, monitor credit usage, and avoid submitting confidential prompts or private image URLs.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Any agent session with this environment variable can submit requests under your ImaginePro account and may consume your credits.

Why it was flagged

The helper reads the ImaginePro API key from the environment and sends it as a bearer token to the service, which is expected for the integration but gives the agent access to the user's ImaginePro account.

Skill content
key = os.environ.get("IMAGINEPRO_API_KEY", "").strip() ... "Authorization": f"Bearer {api_key}"
Recommendation

Use a dedicated API key where possible, set spending limits or monitor credits, and only expose the key in trusted agent sessions.

What this means

Accidental repeated invocations could spend prepaid credits or create unwanted generation jobs.

Why it was flagged

The documented commands submit paid generation jobs to the ImaginePro API. This is the skill's purpose and costs are disclosed, but automated or repeated use can still have account-credit impact.

Skill content
python3 imaginepro_api.py wait --prompt "a cyberpunk cityscape at sunset" --model flux ... Credits: 6 per image
Recommendation

Review prompts, model choices, and batch sizes before allowing repeated or autonomous use.

What this means

Sensitive prompts, private image URLs, or identifying images may be processed by the external service.

Why it was flagged

Prompts and reference image URLs are sent to an external provider API. This is disclosed and purpose-aligned, but users should treat submitted prompts and image URLs as shared with the provider.

Skill content
BASE_URL = "https://api.imaginepro.ai/api/v1" ... contents.append({"type": "image", "url": img_url})
Recommendation

Avoid sending private or confidential images/prompts unless you trust the provider and its data handling terms.