Meitu Carousel
v1.0.0一键生成轮播套组，封面+内页风格统一。适用于小红书组图笔记、知识卡片轮播、产品介绍套图。当用户提到套组、组图、轮播图、轮播套组、知识卡片套图、产品套图时触发。
⭐ 0· 67·0 current·0 all-time
by@meitu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (生成轮播套组) match the declared requirements: a meitu CLI binary and Meitu API keys. The SKILL.md only calls meitu image-poster-generate and related auth/verify commands which are necessary for an image-generation CLI integration.
Instruction Scope
Instructions are detailed and largely confined to generating cover and inner pages via the meitu CLI and optionally reading/writing project memory under the OpenClaw visual workspace. The skill will read openclaw.yaml, DESIGN.md, and various $VISUAL memory files when in project mode; it will create/write files under the visual workspace (e.g., output_dir, memory files). This is coherent with a project-mode assistant but users should be aware the skill will read and persist non-sensitive project-specific files in ~/.openclaw/workspace/visual/ when enabled.
Install Mechanism
This is an instruction-only skill (no install spec). It recommends installing meitu-cli via npm (npm install -g meitu-cli), which is a standard package manager flow and appropriate for a CLI-based integration. No remote arbitrary downloads or extract-from-URL steps are present in the skill bundle.
Credentials
The only required environment variables are MEITU_OPENAPI_ACCESS_KEY and MEITU_OPENAPI_SECRET_KEY (with file fallback ~/.meitu/credentials.json), which directly correspond to the declared external service (Meitu). No unrelated secrets or credentials are requested.
Persistence & Privilege
always:false (normal). The skill requests read/write access to the user's OpenClaw visual workspace (~/.openclaw/workspace/visual/) and may create/append memory/observation files per the memory-protocol. This is appropriate for a project-mode feature but means the skill will persist user preferences and generated outputs to disk — users should be comfortable with those files being created/modified.
Assessment
This skill appears to do what it says: it runs the Meitu CLI and needs your Meitu API keys. Before enabling/installing, consider: 1) Only provide MEITU_OPENAPI_ACCESS_KEY/SECRET if you trust the Meitu service and the meitu-cli package source; prefer creating API keys with limited scope. 2) Installing meitu-cli via npm -g modifies your system packages; review the npm package (meitu-cli) origin before installing. 3) The skill will read from and write to your OpenClaw visual workspace (~/.openclaw/workspace/visual/) and may create memory/observation files; back up any important project files if you’re concerned. 4) If you keep credentials in ~/.meitu/credentials.json, be aware the skill may read that file as an alternative to env vars. If any of these behaviors are unacceptable, do not provide the credentials or do not enable project-mode file access.Like a lobster shell, security has layers — review code before you run it.
latestvk974yc7gj1bjnjtd27y4p95nf1847f5r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsmeitu
EnvMEITU_OPENAPI_ACCESS_KEY, MEITU_OPENAPI_SECRET_KEY
Primary envMEITU_OPENAPI_ACCESS_KEY