Dlazy Seedream 5.0 Lite

Fast image generation with Doubao Seedream 5.0 Lite. Supports text-to-image and image-to-image.

Security Scan

The skill is a thin CLI wrapper for the dLazy Seedream image-generation service and its requirements and instructions are coherent with that purpose, with only minor metadata mismatches to review before installing.

Purpose & Capability

The name/description (Seedream image generation) matches the actions described (invoking an npm-distributed CLI that calls api.dlazy.com and uploads media to oss.dlazy.com). The declared required binaries (npm, npx) are reasonable for installing/using an npm CLI. Minor inconsistency: the registry metadata shows 'No install spec', but the SKILL.md includes a metadata.install field (npm install -g ... and npx alternative) — this is likely harmless but worth noting.

Instruction Scope

SKILL.md instructs the agent to run the dlazy CLI, pass prompts and optional local image paths (which the CLI uploads), and to guide users on API key issues and insufficient balance. The instructions do not request unrelated system files or other credentials. They do reference the CLI's user config path (~/.dlazy/config.json) and mention the DLAZY_API_KEY env var, but they do not instruct the agent to read arbitrary files or exfiltrate data beyond the dLazy endpoints.

Install Mechanism

The SKILL.md recommends installing a pinned npm package (@dlazy/cli@1.0.6) or using npx. Installing from npm is proportionate for a CLI skill. Slight concern: the registry-level 'No install spec' contrasts with an embedded install command in the SKILL.md metadata; ensure you review the npm package and GitHub source before performing a global install. The install source (npm + GitHub repo) is a standard, traceable source (not a raw download URL).

Credentials

The skill needs a dLazy API key to operate (SKILL.md describes dlazy auth set and DLAZY_API_KEY), which is appropriate for a cloud image-generation API. The registry's top-level 'Required env vars: none' omits explicit declaration of DLAZY_API_KEY — a minor metadata mismatch. The skill stores the key in ~/.dlazy/config.json (user-scoped) per the docs; that storage location is typical for a CLI but you should be aware local image files passed to the CLI will be uploaded to dLazy's OSS.

Persistence & Privilege

The skill does not request always:true or any elevated platform privileges. It is instruction-only and does not modify other skills or global agent settings. Autonomous invocation is allowed (platform default) but not combined with other concerning flags.

Assessment

This skill is a thin client for the dLazy Seedream API and looks coherent. Before installing or running it: (1) review the @dlazy/cli GitHub repo and the pinned npm package (1.0.6) to ensure you trust the publisher; (2) prefer using 'npx @dlazy/cli@1.0.6' for one-off runs rather than a global install, if you want to avoid persisting binaries; (3) be aware that any local image files you pass will be uploaded to dLazy's oss.dlazy.com and prompts are sent to api.dlazy.com — check the service's privacy and billing terms; (4) the skill references DLAZY_API_KEY and a config file (~/.dlazy/config.json) but the registry metadata doesn't declare that env var explicitly, so expect to provide the key via dlazy auth set or the DLAZY_API_KEY environment variable. If you need more assurance, ask the maintainer for an auditable release tarball or inspect the npm package contents before use.

English · 中文

Fast image generation with Doubao Seedream 5.0 Lite. Supports text-to-image and image-to-image.

Trigger Keywords

• doubao
• seedream
• generate image, fast image generation
• text to image, image to image

Authentication

All requests require a dLazy API key, configured through the CLI:

dlazy auth set YOUR_API_KEY

The CLI saves the key in your user config directory (~/.dlazy/config.json on macOS/Linux, %USERPROFILE%\.dlazy\config.json on Windows), with file permissions restricted to your OS user account. You can also supply the key per-invocation via the DLAZY_API_KEY environment variable.

Getting Your API Key

1. Sign in or create an account at dlazy.com
2. Go to dlazy.com/dashboard/organization/api-key
3. Copy the key shown in the API Key section

Each key is scoped to your dLazy organization and can be rotated or revoked at any time from the same dashboard.

About & Provenance

• CLI source code: github.com/dlazyai/cli
• Maintainer: dlazyai
• npm package: @dlazy/cli (pinned to 1.0.6 in this skill's install spec)
• Homepage: dlazy.com

You can install on demand without persisting a global binary by running:

npx @dlazy/cli@1.0.6 <command>

Or, if you prefer a global install, the skill's metadata.clawdbot.install field declares the exact pinned version (npm install -g @dlazy/cli@1.0.6). Review the GitHub source before installing.

How It Works

This skill is a thin client over the dLazy hosted API. When you invoke it:

• Prompts and parameters you provide are sent to the dLazy API endpoint (api.dlazy.com) for inference.
• Any local file paths you pass to image / video / audio fields are uploaded to dLazy's media storage (oss.dlazy.com) so the model can read them — the same flow as any cloud-based generation API.
• Generated output URLs returned by the API are hosted on oss.dlazy.com.

This is the standard SaaS pattern; the skill itself does not access network or filesystem resources beyond what the dLazy CLI already handles. See dlazy.com for the full service terms.

Usage

CRITICAL INSTRUCTION FOR AGENT: Run the dlazy seedream-5.0-lite command to get results.

dlazy seedream-5.0-lite -h

Options:
  --prompt <prompt>                    Prompt
  --images <images...>                 Images [image: url or local path] (max 10) [default: ]
  --resolution <resolution>            Resolution [default: 2k] (choices: "2k", "3k")
  --size <size>                        Size [default: 16:9] (choices: "1:1", "4:3", "3:4", "16:9", "9:16", "3:2", "2:3", "21:9")
  --input <spec>                       JSON payload: inline string, @file, or - (stdin)
  --dry-run                            Print payload + cost estimate without calling API
  --no-wait                            Return generateId immediately for async tasks
  --timeout <seconds>                  Max seconds to wait for async completion (default: "1800")
  -h, --help                           display help for command

Output Format

{
  "ok": true,
  "kind": "urls",
  "data": {
    "urls": [
      "https://oss.dlazy.com/result.mp4"
    ]
  }
}

Command Examples

# basic call:
dlazy seedream-5.0-lite --prompt 'prompt text' --image '/path/to/image.png'

# complex call:
dlazy seedream-5.0-lite --prompt 'prompt text' --image 'https://oss.dlazy.com/image.png'

Error Handling

Code	Error Type	Example Message
401	Unauthorized (No API Key)	ok: false, code: "unauthorized", message: "API key is missing or invalid"
501	Missing required parameter	error: required option '--prompt <prompt>' not specified
502	Local file read error	Error: Image file/Video file not found: C:\path\to\your\file
503	API request failed (no balance)	ok: false, code: "insufficient_balance"
503	API request failed (server error)	HTTP status code error (500 server crash)
504	Asynchronous task execution failed	=== Generation Failed === / {Specific error reason returned by backend, for example "Prompt violates safety policy"}

AGENT CRITICAL INSTRUCTION:

1. If the execution result returns code: "insufficient_balance", you MUST explicitly inform the user that their credits are insufficient and guide them to recharge: https://dlazy.com/dashboard/organization/settings?tab=credits
2. If the execution result returns code: "unauthorized" or indicates missing API key, you MUST inform the user to get their API key from https://dlazy.com/dashboard/organization/api-key and save it using dlazy auth set <key> and resume the task.

Tips

Visit https://dlazy.com for more information.