Moark Image Generation

Generate high-quality images from text descriptions.

Security Scan

The skill’s code, runtime instructions, requested environment variable, and install step are coherent with an image-generation integration for Gitee AI; no obvious misdirection or unrelated credential requests were found.

Purpose & Capability

Name/description claim image generation via Gitee AI; the script calls an API at https://ai.gitee.com/v1 using an API key (GITEEAI_API_KEY). The required binary (uv) is used to run the bundled script and the primary env var matches the API usage — this is proportionate to the stated purpose.

Instruction Scope

SKILL.md instructs running the included script and parsing stdout for a line beginning with IMAGE_URL. The script only reads the prompt/flags and the GITEEAI_API_KEY environment variable (or --api-key). It does not attempt to read arbitrary system files. Note: an error message mentions '~/.openclaw/openclaw.json' as a user-facing hint but the script does not read that file; the README and script are consistent about where the key may come from.

Install Mechanism

Install spec only installs the 'uv' brew formula which is used to run the script. There is no download from an arbitrary URL or archive extraction. Minor issue: the script has a Python dependency on the 'openai' package and a Python version requirement in comments, but the install spec does not declare installing Python or pip packages; that is an operational omission rather than a security red flag.

Credentials

Only GITEEAI_API_KEY is required and declared as the primary credential; that matches the skill purpose. No unrelated credentials, tokens, or config paths are requested. The script sends the prompt and negative_prompt to the Gitee AI endpoint — this is expected, so ensure you trust that service before providing your key.

Persistence & Privilege

The skill does not request always:true, does not modify other skills or system settings, and does not write persistent credentials. Default autonomous invocation is allowed (platform default) but not combined with elevated privileges.

Assessment

This skill appears to do what it says: call Gitee AI to generate images and return the IMAGE_URL. Before installing, consider: 1) The skill will send your prompt (and the provided API key) to https://ai.gitee.com — only install if you trust that service. 2) Keep your GITEEAI_API_KEY secret; do not reuse a high-privilege key if you don’t trust the skill. 3) The install step only covers the 'uv' brew formula; you may need Python 3.10+ and the 'openai' Python package for the script to run — the skill does not auto-install Python deps. 4) Verify the brew 'uv' formula is the utility you expect (name collisions are possible). If any of the above concerns you, do not provide your API key or run the skill in an isolated environment.

Image Generator

This skill allows users to generate high-quality images based on text descriptions using an external image generation API(Gitee AI).

Usage

Use the bundled script to generate images.

uv run {baseDir}/scripts/generate_image.py --prompt "your image description" --size 1024x1024 --negative-prompt "elements to avoid" --api-key YOUR_API_KEY

Options

Sizes:

• 256x256 - Small square format
• 512x512 - Square format
• 1024x1024(default) - Square format
• 1024x576 - 16:9 landscape
• 576x1024 - 9:16 portrait
• 1024x768 - 4:3 format
• 768x1024 - 3:4 portrait
• 1024x640 - 16:10 landscape
• 640x1024 - 10:16 portrait

Additional flags:

• --negative-prompt - Specify what elements users want to avoid in the generated image(default: "低分辨率，低画质，肢体畸形，手指畸形，画面过饱和，蜡像感，人脸无细节，过度光滑，画面具有AI感。构图混乱。文字模糊，扭曲。").
• --size - Specify the size of the generated image. Options include 256x256, 512x512, 1024x1024 (default), 1024x576, 576x1024, 1024x768, 768x1024, 1024x640, 640x1024.

Workflow

1. Execute the generate_image.py script with the parameters from the user.
2. Parse the script output and find the line starting with IMAGE_URL:.
3. Extract the image URL from that line (format: IMAGE_URL: https://...).
4. Display the image to the user using markdown syntax: 🖼️[Generated Image](URL).

Notes

• You should not only return the image URL but also describe the image based on the user's prompt.
• The Lanaguage of your answer should be consistent with the user's question.
• By default, return image URL directly without downloading.
• If GITEEAI_API_KEY is none, the user must provide --api-key argument
• The script prints IMAGE_URL: in the output - extract this URL and display it using markdown image syntax: 🖼️[Generated image](URL).
• Always look for the line starting with IMAGE_URL: in the script output and render the image for the user.
• You should honestly repeat the description of the image from user without any additional imaginations.