Generate product photos for ecommerce
PassAudited by ClawScan on May 1, 2026.
Overview
This skill is purpose-aligned for ProductAI photo generation, but it requires a ProductAI API key and sends image URLs/prompts to ProductAI.
Install this if you intend to use ProductAI.photo and are comfortable sharing product image URLs/prompts with that service. Handle the API key carefully, avoid pasting it into ordinary chat when possible, and check token costs before running generation, upscaling, or batch jobs.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone who obtains the API key could use the user's ProductAI account or consume tokens.
The integration can receive a ProductAI API key through the agent conversation and persist it locally. This is purpose-aligned, but it places a paid-service credential in agent-handled context.
api_key = user_message # e.g., "sk_prod_abc123..." ... config_path = Path.home() / '.openclaw' / 'workspace' / 'productai' / 'config.json' ... config_path.chmod(0o600)
Prefer the interactive setup script or a secure secret-entry mechanism, avoid pasting real keys into ordinary chat when possible, and rotate the key if it is exposed.
Product image URLs, creative prompts, and related job data are shared with ProductAI for processing.
The skill sends image URLs and prompts to the ProductAI API provider, which is necessary for the advertised photo-generation workflow.
payload = {"model": model, "image_url": image_url, "prompt": prompt} ... self.session.post(f"{self.api_endpoint}/api/generate", json=payload, timeout=self.DEFAULT_TIMEOUT)Use only images and prompts that are acceptable to share with ProductAI, and review the provider's privacy and retention terms for confidential product launches or client work.
Generating or upscaling images can consume ProductAI credits even if the final result is not used.
The skill invokes paid/token-metered ProductAI operations. The cost model is disclosed and aligned with the purpose, but users should notice it before running generation or upscaling.
Tokens are deducted when each operation **starts** (not on completion).
Confirm the model and token cost before running jobs, especially batch jobs or high-cost upscaling.
Using the skill means running local Python helper scripts in the user's environment.
The skill relies on local Python scripts and dependencies. This is disclosed and central to the integration rather than hidden or unrelated code execution.
The integration scripts require Python 3.7+ with these dependencies: ... pip install requests pillow
Run the scripts from the expected skill directory, keep dependencies updated, and use an isolated Python environment if desired.
