ClawHub

Doubao Maliang Image Gen

v1.0.1

小马良-豆包生图。Generate images with Doubao Seedream via Volcano Engine ARK. Supports Seedream 5.0 and other models. Use when the user invokes 小马良 or requests Douba...

⭐ 0· 114·0 current·0 all-time
by@joannaxing
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Doubao Seedream via Volcano Engine) align with the requested binary (python3), the single required env var (VOLCANO_ENGINE_API_KEY), and the included Python client that POSTs to a Volcano ARK images endpoint.
ℹ
Instruction Scope
SKILL.md and the script focus on prompting the Seedream API and saving images locally. The doc promises 'automatic send back to the chat window' — the included script only prints file paths and saves files; sending into the chat is likely performed by the OpenClaw platform integration rather than the script. Otherwise the runtime instructions do not request unrelated files, credentials, or system state.
✓
Install Mechanism
No install spec; this is an instruction-only skill with a small Python script. Nothing is downloaded or written outside the user's workspace/home by an installer.
ℹ
Credentials
Requires a single API key (VOLCANO_ENGINE_API_KEY) which is appropriate. The script also allows overriding the API endpoint via SEEDREAM_API_ENDPOINT (and accepts alternate key names); allowing an arbitrary endpoint is convenient but means a misconfigured endpoint could capture the API key or payloads — this is a user-configurable option, not required by default.
✓
Persistence & Privilege
always is false and the skill does not request elevated system privileges. It writes outputs under ~/.openclaw/workspace/tmp which is proportional to its purpose.
Assessment
This skill appears to be what it claims: a small Python client that calls Volcano Engine Seedream, saves images locally, and prints paths. Before installing: 1) Only provide a Volcano Engine API key you trust and scope that key to image-generation permissions; 2) avoid pointing SEEDREAM_API_ENDPOINT to unknown servers (overriding the endpoint could leak your API key/payloads); 3) note that the script saves files under ~/.openclaw/workspace/tmp and the gallery index.html may contain your prompts (the code escapes HTML); 4) if you need stricter containment, run the skill in an isolated environment or use a minimally privileged API key. If you want absolute assurance, review the script locally (scripts/gen.py) and test with a limited/sandbox API key first.

Like a lobster shell, security has layers — review code before you run it.

ai-imagevk97chcdtt991cze5dmnhe60fps83fagwdoubaovk97chcdtt991cze5dmnhe60fps83fagwimage-generationvk97chcdtt991cze5dmnhe60fps83fagwlatestvk977jwb0zx7trybmb1zx7f1v4583erj7maliangvk97chcdtt991cze5dmnhe60fps83fagwseedreamvk97chcdtt991cze5dmnhe60fps83fagwtext-to-imagevk97chcdtt991cze5dmnhe60fps83fagw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎨 Clawdis
Binspython3
EnvVOLCANO_ENGINE_API_KEY
Primary envVOLCANO_ENGINE_API_KEY

Comments