Best Image
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears to do what it says: generate or edit images through EvoLink, while using an EvoLink API key, sending prompts/images to that service, and saving results locally.
This skill looks coherent and purpose-aligned. Before installing, understand that it uses your EvoLink API key, may spend EvoLink credits, sends prompts and image URLs to EvoLink, and saves generated images locally.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the trigger may generate paid EvoLink API calls, especially if invoked repeatedly or with higher-quality settings.
The skill instructs the agent to call the image-generation workflow as soon as a matching trigger is used; this is aligned with the skill purpose, but it can spend API credits.
Treat the text after the colon as `prompt`, use default size `auto` and quality `2K`, generate immediately.
Use the trigger only when you intend to generate an image, and confirm quality settings if cost matters.
Anyone or any agent run with this key can use the associated EvoLink account and credits for image generation.
The script reads the EvoLink API key from the environment or argument and sends it as a Bearer token to the EvoLink API.
default=os.getenv("EVOLINK_API_KEY", "") ... "Authorization": f"Bearer {api_key}"Use a dedicated, revocable EvoLink key with appropriate account limits, and avoid sharing it outside the intended environment.
Text prompts and referenced images may be shared with EvoLink for processing.
Prompts and optional image URLs are included in the payload sent to the external EvoLink API.
API_BASE = "https://api.evolink.ai/v1" ... "prompt": args.prompt ... payload["image_urls"] = args.image_urls
Do not submit private, confidential, or sensitive prompts/images unless you are comfortable with EvoLink processing them under its terms.
Installing and using the skill allows the agent to run the included script to make network requests and save output files.
The normal workflow runs the included local Python script; this is disclosed and central to the skill's operation.
python3 {baseDir}/scripts/generate.py --prompt "a cute cat" --size "auto"Prefer the included Python script over manually edited shell fallbacks, and keep prompts passed as arguments rather than splicing untrusted text into shell snippets.
