Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Free Image Generation Skill

v1.0.4

Professional free image generation skill for agents. No API key required. Generate images from text with resilient retry/backoff and clean local file output....

1· 877·12 current·12 all-time
byILA IKRAM@mrilaikram
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (free image generation) align with the included Python script and docs. The skill requires running Python and pip (via scripts/setup_env.sh) even though the registry metadata lists no required binaries—this is a small mismatch but expected for a Python script.
Instruction Scope
SKILL.md instructs installing dependencies and running scripts to generate and save images. The runtime code makes network requests to an unofficial third‑party API (image-generation.perchance.org), extracts a userKey from HTML, posts prompt payloads, and downloads image bytes. The instructions do not read unrelated local files or environment variables and return structured output. The external network calls are expected for this purpose but are worth noting for privacy/availability reasons.
Install Mechanism
No install spec in registry; the bundled setup_env.sh installs the single dependency (requests) via pip --user from the included requirements.txt. This is a low-risk, local install behavior (no arbitrary remote downloads or extract steps).
Credentials
The skill requests no environment variables or credentials, which is proportional. It does, however, contact an unofficial external service (no homepage or authoritative source provided). Consider the privacy implications of sending prompts to that third party and the reliability/trustworthiness of the endpoint.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and only writes image files to the output path and installs a Python library to the user's environment. No elevated or global agent privileges are requested.
Assessment
This package appears to do what it says: it runs a local Python script that calls an unofficial Perchance image API to generate and save images. Before installing/running: (1) confirm you have a safe Python environment (python3 and pip); (2) review the scripts (they are included) and verify you are comfortable sending prompts to https://image-generation.perchance.org — prompts and generated images will be transmitted to that external service; (3) run in an isolated environment if prompts may contain sensitive data; (4) be aware the service is unofficial and may change or become unavailable; (5) if you need higher assurance, request a skill with a documented homepage/source or an official API provider.

Like a lobster shell, security has layers — review code before you run it.

latestvk97czpxp63wx8qg9cbqen86rsx8298df
877downloads
1stars
5versions
Updated 23h ago
v1.0.4
MIT-0

Free Image Generation Skill

No API key required.

Run a clean production workflow:

  1. install dependencies,
  2. generate image from prompt,
  3. save output.

Quick Start (Fresh Setup)

  1. Install dependencies:
bash scripts/setup_env.sh
  1. Generate one image:
python3 scripts/perchance_generate.py \
  --prompt "cinematic isometric office, dusk, neon reflections" \
  --out ./media/free-image-sample.jpg \
  --shape square

Reliability Rules

  • Default retries: 3
  • Backoff: built into script
  • On failure, return exact error and propose retry
  • Designed for free, repeated usage with responsible pacing
  • Keep usage responsible and moderate

Parameters

perchance_generate.py supports:

  • --prompt (required)
  • --out (required)
  • --shape (portrait|square|landscape)
  • --negative
  • --guidance
  • --retries
  • --timeout

Resources

  • Main generator: scripts/perchance_generate.py
  • Dependency setup: scripts/setup_env.sh, scripts/requirements.txt

Comments

Loading comments...