Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Draw Images By Apiyi

v1.0.0

Generate images using APIYI API.

0· 298·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description ask to generate images via APIYI and the skill only requires the APIYI_API_KEY and the 'uv' runtime used to run the included Python script. No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md and the Python script limit actions to contacting APIYI, downloading the returned image URL, saving the image to the specified path, and printing a MEDIA: line for attachment. There are no instructions to read unrelated files, enumerate system secrets, or transmit data to other endpoints.
Install Mechanism
Install uses a Homebrew formula ('uv') which is an expected low-risk mechanism for providing the required runtime. The skill does not download arbitrary archives or run obscure installers. Python dependencies are declared in the script comments (likely managed by the uv runtime).
Credentials
Only APIYI_API_KEY is required and is declared as the primary credential. The script also accepts an --api-key override. No other secrets or unrelated environment variables are requested.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not request permanent presence, nor does it modify other skills or system-wide settings.
Assessment
This skill appears coherent, but review these practical points before installing: 1) Trust the API provider (https://apiyi.com) — the skill will send your prompts and API key to that service; use an API key with limited scope if possible. 2) The script downloads an image from a URL returned by the service and writes files to the workspace or any absolute path you specify — avoid giving absolute paths you don't trust. 3) The skill requires the 'uv' runtime (installed via Homebrew) and will pull Python dependencies (openai, requests, pillow) when run; verify those packages and the uv formula are acceptable in your environment. 4) Keep your API key secret (do not paste it into public places); the skill accepts the key via env var or CLI arg. 5) If you do not want the agent to call this skill autonomously, control invocation or disable it in your agent settings.

Like a lobster shell, security has layers — review code before you run it.

latestvk9735f1r17tp400fh2smsvrphn8201hv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🎨 Clawdis
Binsuv
EnvAPIYI_API_KEY
Primary envAPIYI_API_KEY

Install

Install uv (brew)
Bins: uv
brew install uv

SKILL.md

Draw Images by APIYI

Generate images using APIYI API. Simple and fast.

Usage

Slash Command (Recommended)

/draw-images-by-apiyi a cute cat wearing sunglasses
/draw-images-by-apiyi a sunset over mountains -r 2K

Natural Language

Just ask the agent:

  • "Draw a cute cat for me"
  • "Generate an image of a sunset"
  • "Can you create a picture of a robot?"

Command Line

uv run {baseDir}/scripts/generate_image.py --prompt "your image description" --filename "output.png"

Examples

Basic generation

uv run {baseDir}/scripts/generate_image.py -p "a cute cat wearing sunglasses" -f cat.png

With resolution

uv run {baseDir}/scripts/generate_image.py -p "a sunset over mountains" -f sunset.png -r 2K

With explicit API key

uv run {baseDir}/scripts/generate_image.py -p "a robot" -f robot.png --api-key YOUR_API_KEY

API Key

Get your API key from https://apiyi.com/

Set via environment:

export APIYI_API_KEY=your-key-here

Or configure in ~/.openclaw/openclaw.json:

{
  skills: {
    entries: {
      "draw-images-by-apiyi": {
        enabled: true,
        env: {
          "APIYI_API_KEY": "your-key-here"
        }
      }
    }
  }
}

Parameters

ParameterValuesDefaultDescription
--prompt, -ptextrequiredImage description
--filename, -fpathrequiredOutput filename
--resolution, -r1K, 2K, 4K1KOutput resolution
--api-key, -kstringenv varOverride environment variable

Output Path

  • Relative path (e.g., -f out.png) → outputs to current workspace root
  • Absolute path (e.g., -f /tmp/out.png) → uses specified path

Notes

  • Resolutions: 1K (1024×1024), 2K (2048×2048), 4K (4096×4096)
  • The script prints a MEDIA: line for OpenClaw to auto-attach images
  • Requires APIYI_API_KEY environment variable

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…