Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Byted Seedream Image Generate

v1.0.0

Generate high-quality images from text prompts using Volcano Engine Seedream models. Supports multiple artistic styles and aspect ratios. Use this skill when...

0· 139·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for volcengine-skills/byted-seedream-image-generate.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Byted Seedream Image Generate" (volcengine-skills/byted-seedream-image-generate) from ClawHub.
Skill page: https://clawhub.ai/volcengine-skills/byted-seedream-image-generate
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install byted-seedream-image-generate

ClawHub CLI

Package manager switcher

npx clawhub@latest install byted-seedream-image-generate
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The skill's name and description (Volcano Engine / Seedream image generation) match the included Python client which calls a Volcano Engine API. However the registry metadata claims 'Required env vars: none' while both SKILL.md and the script actually require an API key (ARK_API_KEY or MODEL_IMAGE_API_KEY or MODEL_AGENT_API_KEY) and optionally an API base URL. That metadata mismatch is an incoherence the user should be aware of.
!
Instruction Scope
The runtime instructions are narrowly scoped to building and sending image-generation requests, which is appropriate. However the script prints full request headers and bodies to stdout, and the printed headers include the Authorization: Bearer <API_KEY> value — this will expose the API key in logs, chat transcripts, or other outputs. The SKILL.md does not warn about these debug prints or recommend redaction.
Install Mechanism
No install spec (instruction-only + a Python script). That minimizes install-time risk — nothing is downloaded or written during installation by the registry metadata. The presence of a single script is reasonable for a client wrapper.
!
Credentials
The script legitimately needs a single API key and an optional base URL for the Seedream/Volcano Engine API, which is proportionate. But the package metadata failing to declare required environment variables is misleading. More importantly, the script's debug output will expose that secret to any place that captures stdout/stderr, increasing risk of accidental credential leakage.
Persistence & Privilege
The skill does not request elevated or persistent privileges (always:false, no config paths, no modifications to other skills). It runs as a normal client script and does not persist or modify agent configuration.
What to consider before installing
This skill appears to implement a legitimate client for Volcano Engine Seedream models, but take these precautions before installing or running it: - Treat it as suspicious until the toolbar/registry metadata is corrected to declare the required API key env vars (ARK_API_KEY / MODEL_IMAGE_API_KEY / MODEL_AGENT_API_KEY). - Do not run the script in environments where stdout/stderr are widely logged or shared (CI logs, public shells, chat transcripts). The script prints the full Authorization header (Bearer <API_KEY>) and request bodies to stdout, which will leak your API key and potentially prompt content. - Prefer an updated script that removes or redacts debug prints (remove printing of headers or mask the Authorization header), or run it after editing to sanitize logging. - Verify the API_BASE host (default is ark.cn-beijing.volces.com) is the correct official endpoint you expect to use, and use a dedicated API key with least privilege and billing controls. - If you need stronger assurance, ask the publisher for an updated SKILL.md and code that (a) documents required env vars in registry metadata, (b) stops printing secrets, and (c) documents exactly how web-search/tools integration is implemented (the README mentions web tools for 5.0 but the client shows only passing 'tools' field; confirm no unexpected network calls). If you cannot safely vet or modify the script yourself, consider not installing it or running it only with a throwaway API key.

Like a lobster shell, security has layers — review code before you run it.

latestvk979bxnh6c0n3nbqg91m6ra1wx83w57w
139downloads
0stars
1versions
Updated 4w ago
v1.0.0
MIT-0

byted-seedream-image-generate

Description

Generate high-quality images from text prompts using Volcano Engine Seedream models. This skill provides access to three powerful Seedream model versions (4.0, 4.5, and 5.0-lite), each offering unique capabilities for different use cases.

When to Use This Skill

Use this skill when:

  • Users want to create images from text descriptions
  • Users need to generate artwork in various artistic styles
  • Users want to create visual content for creative projects
  • Users need AI-powered image generation capabilities
  • Users want to convert reference images to different styles
  • Users need to generate multiple images in batch
  • Users require high-quality, professional-looking images

Model Versions

VersionModel NameRelease DateRecommendationBest For
4.0doubao-seedream-4-0-250828August 2025⭐⭐⭐Daily use, quick generation
4.5doubao-seedream-4-5-251128November 2025⭐⭐⭐⭐Detail-oriented work, complex scenes
5.0doubao-seedream-5-0-2601282026⭐⭐⭐⭐⭐Highest quality, best creativity, tools support

Features

  • Text-to-Image: Generate images from detailed text descriptions
  • Image-to-Image: Transform reference images into different styles
  • Batch Generation: Create multiple images in a single request
  • Multiple Versions: Choose from 4.0, 4.5, or 5.0-lite models
  • Watermark Control: Option to disable watermarks
  • Custom Sizes: Support for various image dimensions
  • Output Formats: PNG and JPEG formats (5.0-lite only)
  • Web Search Tools: Internet search integration (5.0-lite only)

Installation & Setup

Prerequisites

# Required: API Key configuration
export MODEL_IMAGE_API_KEY="your-api-key-here"
# or
export MODEL_AGENT_API_KEY="your-api-key-here"
# or
export ARK_API_KEY="your-api-key-here"

# Optional: API Base URL (default already configured)
export MODEL_IMAGE_API_BASE="https://ark.cn-beijing.volces.com/api/v3"
# or
export ARK_BASE_URL="https://ark.cn-beijing.volces.com/api/v3"

The script will prioritize:

  1. Environment variables (ARK_API_KEY, MODEL_IMAGE_API_KEY, MODEL_AGENT_API_KEY)
  2. Environment variables (ARK_BASE_URL, MODEL_IMAGE_API_BASE)
  3. Default values

Usage

Basic Usage (5.0-lite version recommended)

cd scripts
python seedream_image_generate.py -p "A cute kitten playing in a garden"

Specify Version

# Use 4.0 version
python seedream_image_generate.py -p "A cute kitten" --version 4.0

# Use 4.5 version
python seedream_image_generate.py -p "A cute kitten" --version 4.5

# Use 5.0-lite version (recommended)
python seedream_image_generate.py -p "A cute kitten" --version 5.0

Advanced Options

# Custom size without watermark
python seedream_image_generate.py -p "Beautiful sunset" -s 2048x2048 --no-watermark --version 5.0

# Batch generation
python seedream_image_generate.py -p "Generate 3 cute dog pictures" -g --max-images 3 --version 4.5

# Image-to-image
python seedream_image_generate.py -p "Convert this image to anime style" -i "https://example.com/image.jpg" --version 5.0

# Web search tool (5.0-lite only)
python seedream_image_generate.py -p "Latest 2026 smartphone" --web-search --version 5.0

# Custom output format (5.0-lite only)
python seedream_image_generate.py -p "A beautiful landscape" --output-format png --version 5.0

# List all supported versions
python seedream_image_generate.py --list-versions

Command Line Options

OptionShortcutDescriptionDefault
--prompt-pImage description text (required)-
--version-vVersion selection: 4.0, 4.5, 5.05.0
--size-sImage dimensions2048x2048
--image-iSingle reference image URL-
--images-Multiple reference image URLs (space separated)-
--group-gEnable batch image generationfalse
--max-images-Maximum images for batch generation15
--output-format-Output format: png or jpeg (5.0 only)jpeg
--response-format-Response format: url or b64_jsonurl
--stream-Enable streaming outputfalse
--web-search-Enable web search tool (5.0 only)false
--optimize-prompt-mode-Prompt optimization mode: standard or fast-
--timeout-tTimeout in seconds1200
--no-watermark-Disable watermarkfalse
--list-versions-List all supported versions-

Python API Usage

import asyncio
import sys

sys.path.append("scripts")
from seedream_image_generate import seedream_generate

async def main():
    # Use 5.0-lite version (default)
    result = await seedream_generate([
        {
            "prompt": "A cute kitten",
            "size": "2048x2048",
            "watermark": False,
            "output_format": "png"  # 5.0-lite only
        }
    ], version="5.0")
    
    print(result)

asyncio.run(main())

Version Selection Guide

Choose 4.0 if:

  • You need quick daily generation
  • Quality requirements are not extremely high
  • You need faster generation speed
  • Simple scenes and styles

Choose 4.5 if:

  • You want richer details
  • You're working with complex scenes
  • You need better style reproduction
  • You have moderate quality requirements

Choose 5.0-lite (Recommended) if:

  • You want the highest quality
  • You need breakthrough creative expression
  • You have extreme detail requirements
  • You need tools parameter (like web search)
  • You need custom output format (png/jpeg)
  • Important projects and work

When in doubt, use 5.0-lite!

Prompt Engineering Tips

Basic Prompt Structure

[Subject Description] + [Style/Art Movement] + [Lighting/Atmosphere] + [Quality/Resolution]

Advanced Prompts (Optimized for 5.0-lite)

[Subject Description], [Creative Style/Art Movement], [Unique Perspective/Composition], [Special Lighting/Atmosphere], [Emphasizing 5.0-lite creative expression]

Parameter Support by Version

ParameterSeedream 4.0Seedream 4.5Seedream 5.0-liteDescription
modelModel name
promptPrompt (required)
imageReference image(s)
sizeImage dimensions
sequential_image_generationBatch generation control
sequential_image_generation_optionsBatch generation config
response_formatResponse format (url/b64_json)
watermarkWatermark (true/false)
streamStreaming output
optimize_prompt_optionsPrompt optimization config
toolsTool configuration (5.0-lite only)
output_formatOutput format (png/jpeg, 5.0-lite only)

Final Return Info

You should return three types of information:

  1. File format, return the image file (if you have some other methods to send the image file) and the local path of the image, for example: local_path: /root/.openclaw/workspace/skills/image-generate/xxx.png
  2. After generation, show list of images with Markdown format, for example:
      ![generated-image-1](https://example.com/image1.png)
      ![generated-image-2](https://example.com/image2.png)

FAQ

Q: What's the difference between the versions?

A: 4.0 is for quick daily use, 4.5 offers better details for complex scenes, and 5.0-lite provides the highest quality with unique tools support.

Q: How long are generated URLs valid?

A: URLs are valid for 24 hours. Please download and save your images promptly.

Q: What image formats are supported for references?

A: Common formats like JPG and PNG are supported, provided via URL or Base64.

Q: Can I use multiple versions in one call?

A: Currently, only one version per call. For comparisons, make separate calls for different versions.

License

This skill is licensed under the Apache License 2.0. See the LICENSE file for details.

Notice

Please comply with Volcano Engine's terms of service and relevant laws and regulations when using this skill.

Comments

Loading comments...