ai-wallpaper-skill

一个能够根据用户提示词生成 AI 图片并自动将其设置为桌面壁纸的能力模块。当用户提到“换壁纸”、“生成桌面”、“设置背景”等需求时触发。当前实现支持 Windows 和 macOS。

Security Scan

The skill largely does what it claims (generate an image and set it as wallpaper), but there are metadata inconsistencies and a small allowance (base_url override) that could be misused — review the API key handling and endpoint before installing.

Purpose & Capability

The code and SKILL.md match the stated purpose: they generate an image via an OpenAI-compatible API and set it as the desktop wallpaper on Windows/macOS. However, registry metadata (top-level requirements) lists no required env vars while SKILL.md and the script both require an API key (BAIDU_API_KEY). This mismatch between declared registry metadata and the runtime instructions is an incoherence that should be resolved.

Instruction Scope

SKILL.md instructs only to check platform, obtain a prompt and API token, run the included Python script which calls the image API, writes assets/wallpaper.png, and updates the system wallpaper via platform-appropriate APIs. The instructions do not direct the agent to read unrelated system files, collect other credentials, or transmit data to unexpected external endpoints (default endpoint is Baidu AIStudio).

Install Mechanism

There is no install spec — the skill is executed by running the included Python script. Dependencies are minimal and explicit (requirements.txt uses the openai package). No network downloads or archive extraction are embedded in an installer.

Credentials

The script and SKILL.md require an API key (BAIDU_API_KEY) to call an external image-generation API; that is proportionate to the stated functionality. Two concerns: (1) the registry metadata did not declare this required environment variable, creating a mismatch the user should notice; (2) the script allows overriding --base_url, which is useful for legitimate testing but also means a user (or attacker with local access) could point the client at an arbitrary endpoint to receive generated images or accept uploaded content. Verify you only provide API keys to trusted endpoints and do not run the script with a modified base_url from untrusted sources.

Persistence & Privilege

The skill does not request permanent 'always' inclusion, does not modify other skills, and does not write to system-wide configs beyond storing the generated image in assets/ and calling standard OS APIs to set wallpaper. macOS requires granting Automation permission for 'System Events' — the script notes this.

What to consider before installing

This skill's behavior is largely consistent with its description: it generates an image and sets it as your wallpaper. Before installing or running it: (1) confirm the BAIDU_API_KEY requirement — the registry metadata did not list it, but the script does need it; (2) only supply an API key you trust and avoid changing --base_url unless you know the endpoint is safe; (3) review the included scripts/wallpaper_skill.py yourself (it is short and readable) and run in a controlled environment first; (4) on macOS you must grant System Events automation permission for wallpaper changes; (5) if you have concerns about exporting images or keys, run the script offline or with a test key. If you want higher assurance, ask the publisher for a canonical homepage or repository and a clarification of the declared metadata.

Instructions

核心原则

• 这是一个面向 Windows 和 macOS 的桌面增强能力模块。
• 当前版本支持 Windows 和 macOS；Linux 暂未接入。
• 必须获取用户的 prompt（描述壁纸内容的提示词）。
• 必须获取 API 访问权限：
  • 提示用户从 Baidu AIStudio控制台 (AccessToken) 获取 Token。
  • 通过参数 --api_key 或环境变量 BAIDU_API_KEY 提供。
• Python 依赖为 openai 包；该脚本通过 OpenAI 兼容协议访问百度端点。

执行步骤

1. 环境检查: 确认当前系统为 Windows 或 macOS。
2. 生成并配置: 调用 scripts/wallpaper_skill.py 脚本，将用户的提示词作为输入。该脚本将自动执行以下操作：
   • 调用 AI API 生成图片。
   • 将图片保存至 assets/wallpaper.png。
   • 在 Windows 上通过 SPI 接口即时更新桌面壁纸；在 macOS 上通过 osascript 更新所有桌面空间的壁纸。

输出反馈

• 成功后告知用户壁纸已更新，并提及图片已持久化存储在 assets/ 目录下。