Generate product photos for ecommerce

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is purpose-aligned for ProductAI photo generation, but it requires a ProductAI API key and sends image URLs/prompts to ProductAI.

Install this if you intend to use ProductAI.photo and are comfortable sharing product image URLs/prompts with that service. Handle the API key carefully, avoid pasting it into ordinary chat when possible, and check token costs before running generation, upscaling, or batch jobs.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone who obtains the API key could use the user's ProductAI account or consume tokens.

Why it was flagged

The integration can receive a ProductAI API key through the agent conversation and persist it locally. This is purpose-aligned, but it places a paid-service credential in agent-handled context.

Skill content
api_key = user_message  # e.g., "sk_prod_abc123..." ... config_path = Path.home() / '.openclaw' / 'workspace' / 'productai' / 'config.json' ... config_path.chmod(0o600)
Recommendation

Prefer the interactive setup script or a secure secret-entry mechanism, avoid pasting real keys into ordinary chat when possible, and rotate the key if it is exposed.

What this means

Product image URLs, creative prompts, and related job data are shared with ProductAI for processing.

Why it was flagged

The skill sends image URLs and prompts to the ProductAI API provider, which is necessary for the advertised photo-generation workflow.

Skill content
payload = {"model": model, "image_url": image_url, "prompt": prompt} ... self.session.post(f"{self.api_endpoint}/api/generate", json=payload, timeout=self.DEFAULT_TIMEOUT)
Recommendation

Use only images and prompts that are acceptable to share with ProductAI, and review the provider's privacy and retention terms for confidential product launches or client work.

What this means

Generating or upscaling images can consume ProductAI credits even if the final result is not used.

Why it was flagged

The skill invokes paid/token-metered ProductAI operations. The cost model is disclosed and aligned with the purpose, but users should notice it before running generation or upscaling.

Skill content
Tokens are deducted when each operation **starts** (not on completion).
Recommendation

Confirm the model and token cost before running jobs, especially batch jobs or high-cost upscaling.

What this means

Using the skill means running local Python helper scripts in the user's environment.

Why it was flagged

The skill relies on local Python scripts and dependencies. This is disclosed and central to the integration rather than hidden or unrelated code execution.

Skill content
The integration scripts require Python 3.7+ with these dependencies: ... pip install requests pillow
Recommendation

Run the scripts from the expected skill directory, keep dependencies updated, and use an isolated Python environment if desired.