Ai Intelligent Content Generation

内容生成，文章生成 + 图片生成。

Security Scan

The skill's description matches content-generation, but its runtime instructions tell the user/agent to git-clone and run an external GitHub repo (pip install && python app.py) that is not included or declared in the package and that likely requires API keys — this mismatch and the execution of remote code is risky.

Purpose & Capability

The name/description (AI content + image generation) is consistent with the SKILL.md features list. However, the skill package itself contains no code and no declared credentials, yet the instructions require pulling and running an external repository that likely implements the claimed capabilities — the package omits the implementation and any justification for required secrets.

Instruction Scope

SKILL.md instructs cloning https://github.com/openclaw-skills/ai-intelligent-content-generation, running pip install -r requirements.txt and python app.py. Those steps cause network downloads and arbitrary code execution outside the skill bundle. The instructions do not enumerate required environment variables (e.g., GPT / image API keys) nor do they constrain what app.py does (ports opened, external endpoints contacted, data collected), granting broad runtime discretion.

Install Mechanism

There is no install spec in the skill manifest; instead the markdown directs a git clone from a GitHub repo and pip install. While GitHub is a common host, the skill bundle does not include or vet that code; cloning and installing an external repo at runtime is a high-risk install pattern because it executes third-party code not shipped with the skill.

Credentials

The skill declares no required environment variables or primary credential, but the SKILL.md mentions 'GPT 集成' and features (image/video generation, content audit) that normally require API keys and service credentials. This mismatch (no declared creds but likely required in practice) is inconsistent and could lead users to supply sensitive keys without clear guidance.

Persistence & Privilege

The skill does not request always:true and is user-invocable; it does not request special persistent privileges in the manifest. That reduces platform-level concerns. However, running the external app could still create persistent local services or network endpoints — the manifest does not disclose that risk.

What to consider before installing

This skill package contains only instructions and no code; the runtime steps tell you to clone and run a GitHub repository which will download and execute third‑party code and install Python dependencies. Before installing or running it: 1) Inspect the remote repository (app.py, requirements.txt) yourself or request the repo contents in the package; 2) Verify what environment variables and API keys are required (e.g., OpenAI/other image/video APIs) and why; 3) Review any network endpoints the app contacts and any server ports it opens; 4) Run it in a sandbox or isolated environment rather than on a machine holding secrets; 5) Prefer skills that include an install spec, bundled code or a signed release, and explicit declarations of required credentials. If the maintainer can provide the repository contents and a clear list of required env vars and network behavior, this assessment could be reevaluated to benign.

AI 智能内容生成系统

描述

内容生成，文章生成 + 图片生成。

功能

• 文章生成（AI写作）
• 图片生成（AI绘图）
• 视频生成（AI视频）
• 标题优化（标题生成）
• 内容审核（自动审核）

定价

• 基础版：¥199/月（100 篇/月）
• 专业版：¥999/月（1000 篇/月）
• 企业版：¥2999/月（无限篇）

适用场景

• 内容创作
• 营销文案
• 新闻写作
• 社媒内容

技术栈

• Python + FastAPI
• GPT 集成
• 图片生成
• 内容审核

安装

git clone https://github.com/openclaw-skills/ai-intelligent-content-generation
cd ai-intelligent-content-generation
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team