Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Openai

OpenAI API integration — chat completions, embeddings, image generation, audio transcription, file management, fine-tuning, and assistants via the OpenAI RES...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 373 · 6 current installs · 6 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name/description claim full OpenAI REST coverage (chat, embeddings, images, transcribe, TTS, file upload, fine-tuning, assistants). The script only issues simple GET/POST calls to nonstandard paths (e.g., /chat, /embed, /file/upload) rather than the canonical OpenAI endpoints and methods; many features (e.g., file upload, transcription, image generation) appear declared but not properly implemented (no multipart upload, no request bodies for many operations). This mismatch suggests the code is a stub or expects a proxy rather than the real OpenAI REST API.
!
Instruction Scope
SKILL.md claims all requests go directly to OpenAI and that nothing is stored locally, but the script will attempt to read a .env file at WORKSPACE (or ~/.openclaw/workspace/.env) to extract OPENAI_API_KEY if the env var is not set. The manifest declared no required config paths but the code does access user files. The instructions also encourage commands (file-upload, transcribe, tts) that the CLI does not implement correctly (it never reads files from disk to send them), so running those commands will not perform the expected actions.
Install Mechanism
No install spec; the skill is instruction-only with an included Python script (stdlib-only). Nothing is downloaded or written during an install step, which is low risk.
Credentials
Only OPENAI_API_KEY is declared and used as the primary credential, which is appropriate for an OpenAI integration. However, the script also reads the WORKSPACE env var and a .env file at ~/.openclaw/workspace/.env (if present) to find the key. That file lookup is not declared in the metadata and could read configuration files in the user's home directory; while it only parses the OPENAI_API_KEY line, reading user config files is broader access than advertised.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide configuration, and does not persist data. Autonomous invocation is permitted (platform default) but not combined here with other high privileges.
What to consider before installing
This skill claims to be a full OpenAI CLI and only asks for your OPENAI_API_KEY, which is reasonable in principle — but the implementation has inconsistencies that raise caution. Before installing or running it: 1) Inspect the script yourself (or ask someone you trust) — it looks like a lightweight wrapper but uses nonstandard API paths and methods and will likely not perform some operations (file uploads, transcriptions) as advertised. 2) Note it will try to read WORKSPACE or ~/.openclaw/workspace/.env to find OPENAI_API_KEY if the environment variable is absent; make sure that file doesn't contain other secrets you don't want read. 3) If you test it, use a limited-scope or expendable API key and small test inputs. 4) Verify the skill's provenance (homepage and author links) and prefer an implementation that uses the official OpenAI endpoints/SDK or clearly documents a proxy. 5) If you need the declared features (multipart uploads, audio file uploads, generation flows), demand a corrected implementation that actually sends files and proper request bodies. If you are not comfortable auditing the code, treat this as untrusted and avoid installing it with a production or high-privilege API key.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk970q7zpj8ewq14q3b3sqeyhtx82awc5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🧠 Clawdis
EnvOPENAI_API_KEY
Primary envOPENAI_API_KEY

SKILL.md

🧠 OpenAI

OpenAI API integration — chat completions, embeddings, image generation, audio transcription, file management, fine-tuning, and assistants via the OpenAI REST API.

Features

  • Chat completions — GPT-4o, GPT-5, o1 model responses
  • Embeddings — text-embedding-3 for semantic search
  • Image generation — DALL-E 3 image creation and editing
  • Audio transcription — Whisper speech-to-text
  • Text-to-speech — TTS with multiple voices
  • File management — upload and manage files
  • Fine-tuning — create and manage fine-tuning jobs
  • Assistants — build and manage AI assistants
  • Moderation — content moderation checks
  • Models — list available models and details

Requirements

VariableRequiredDescription
OPENAI_API_KEYAPI key/token for OpenAI

Quick Start

# Send chat completion
python3 {baseDir}/scripts/openai.py chat "Explain quantum computing in 3 sentences" --model gpt-4o
# Chat with system prompt
python3 {baseDir}/scripts/openai.py chat-system --system "You are a Python expert" "How do I use asyncio?"
# Generate embeddings
python3 {baseDir}/scripts/openai.py embed "The quick brown fox" --model text-embedding-3-small
# Generate an image
python3 {baseDir}/scripts/openai.py image "A sunset over mountains, oil painting style" --size 1024x1024

Commands

chat

Send chat completion.

python3 {baseDir}/scripts/openai.py chat "Explain quantum computing in 3 sentences" --model gpt-4o

chat-system

Chat with system prompt.

python3 {baseDir}/scripts/openai.py chat-system --system "You are a Python expert" "How do I use asyncio?"

embed

Generate embeddings.

python3 {baseDir}/scripts/openai.py embed "The quick brown fox" --model text-embedding-3-small

image

Generate an image.

python3 {baseDir}/scripts/openai.py image "A sunset over mountains, oil painting style" --size 1024x1024

transcribe

Transcribe audio file.

python3 {baseDir}/scripts/openai.py transcribe recording.mp3

tts

Text to speech.

python3 {baseDir}/scripts/openai.py tts "Hello, welcome to our service" --voice alloy --output greeting.mp3

models

List available models.

python3 {baseDir}/scripts/openai.py models

model-get

Get model details.

python3 {baseDir}/scripts/openai.py model-get gpt-4o

files

List uploaded files.

python3 {baseDir}/scripts/openai.py files

file-upload

Upload a file.

python3 {baseDir}/scripts/openai.py file-upload data.jsonl --purpose fine-tune

fine-tune

Create fine-tuning job.

python3 {baseDir}/scripts/openai.py fine-tune '{"training_file":"file-abc123","model":"gpt-4o-mini"}'

fine-tune-list

List fine-tuning jobs.

python3 {baseDir}/scripts/openai.py fine-tune-list

moderate

Check content moderation.

python3 {baseDir}/scripts/openai.py moderate "Some text to check"

usage

Check API usage.

python3 {baseDir}/scripts/openai.py usage --date 2026-02-01

assistants

List assistants.

python3 {baseDir}/scripts/openai.py assistants

Output Format

All commands output JSON by default. Add --human for readable formatted output.

# JSON (default, for programmatic use)
python3 {baseDir}/scripts/openai.py chat --limit 5

# Human-readable
python3 {baseDir}/scripts/openai.py chat --limit 5 --human

Script Reference

ScriptDescription
{baseDir}/scripts/openai.pyMain CLI — all OpenAI operations

Data Policy

This skill never stores data locally. All requests go directly to the OpenAI API and results are returned to stdout. Your data stays on OpenAI servers.

Credits


Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…