Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

豆包AI图像生成

v1.0.0

Generate free AI images via Doubao web interface using automated browser interaction for detailed and styled visual content without API costs.

0· 179·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for fanxi-ju/doubao-ai-image.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "豆包AI图像生成" (fanxi-ju/doubao-ai-image) from ClawHub.
Skill page: https://clawhub.ai/fanxi-ju/doubao-ai-image
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install doubao-ai-image

ClawHub CLI

Package manager switcher

npx clawhub@latest install doubao-ai-image
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The stated purpose (browser-automated image generation on Doubao) matches the instructions, but the skill does not declare or document required automation tooling (e.g., Puppeteer/Selenium, headless browser) or credentials needed for delivery endpoints. Asking the agent to 'mimic human interaction to avoid bot detection' is disproportionate and suggests actions beyond straightforward automation.
!
Instruction Scope
SKILL.md instructs browser navigation, DOM element targeting, screenshot capture, local file writes to /workspace/ai_images/doubao/, and delivering images to external chat (Feishu) — but it does not declare how the agent will obtain Feishu credentials or the browser automation runtime. The explicit guidance to avoid bot detection is scope-creep and ethically questionable; it may imply bypassing site protections or terms of service.
Install Mechanism
There is no install spec (instruction-only), which reduces file-written-to-disk risk. However, the technical requirements (browser automation, element targeting, user-agent control) imply additional tooling that the skill does not declare or install, creating an operational gap the deployer must fill.
!
Credentials
The skill requests no environment variables or credentials in metadata but refers to delivering images to Feishu chat and using a user agent/cookies for automation. That delivery/integration normally requires API tokens or web session credentials — their absence in the declared requirements is an inconsistency and could lead to ad-hoc credential handling or insecure storage.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide privileges. It writes to a local workspace path per its instructions, which is expected for an image-generation task. The default ability for the agent to invoke the skill autonomously is enabled (disable-model-invocation: false), which is normal but worth noting.
What to consider before installing
This skill is inconsistent and raises red flags. Before installing, ask the publisher for: (1) a list of required automation tools (Puppeteer/Selenium, browser binary) and an install spec; (2) how Feishu (or other) delivery is authenticated and where tokens are stored; (3) confirmation they are not instructing the agent to bypass Doubao's terms or bot-detection defenses. Consider legal/ToS risk: automating to 'avoid bot detection' can violate the target site's terms and lead to account suspension or legal issues. If you still want to proceed, only run it in a controlled environment, provide minimal, well-scoped credentials (not long-lived account owner secrets), and prefer using official APIs or partnering with the service instead of automated UI scraping.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cgkgcsgpxaneejqbpdt1mvd83pkww
179downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

doubao-ai-image

Description

Free AI image generation using Doubao (豆包) web interface through browser automation. Mimics human interaction to generate and download images without API costs.

Usage Scenarios

  • Free AI image generation for personal or business use
  • When API-based image generation is not available or too expensive
  • Automated image creation for reports, presentations, or social media
  • Integration with other workflows requiring visual content

Workflow

  1. Navigate to Doubao: Open https://www.doubao.com/chat/ in browser
  2. Access Image Generation: Click on "图像生成" or "AI 创作" feature
  3. Input Prompt: Enter detailed image description in the text box
  4. Generate Images: Submit the prompt and wait for AI generation
  5. Select Image: Choose from the generated options (typically 4 variations)
  6. Capture Image: Use browser automation to screenshot the large preview image (ref="preview") to avoid download issues
  7. Save Locally: Store image in /workspace/ai_images/doubao/ directory with timestamp
  8. Deliver: Send image directly to Feishu chat or other specified destination

Key Features

  • Completely free AI image generation (no API costs)
  • Human-like browser interaction to avoid bot detection
  • Supports detailed prompts with style, composition, and quality specifications
  • Automatic file management and delivery integration
  • Works with Doubao's Seedream 4.5 model and various aspect ratios/styles

Technical Requirements

  • Browser automation capability with proper user agent
  • Element targeting for precise screenshot capture (using ARIA refs)
  • Image format handling (PNG, JPG, WebP)
  • Error handling for generation failures or UI changes
  • Wait mechanisms for AI generation completion
  • Local file system access for image storage

Best Practices

  • Use specific, detailed prompts for better results
  • Include style references when needed (e.g., "realistic", "cartoon", "anime")
  • Specify aspect ratio if important for the use case
  • Target the "preview" element (ref="preview") for clean screenshot capture
  • Verify image quality and composition before delivery
  • Handle cases where generation fails or produces unsuitable results
  • Save images to standardized directory structure: /workspace/ai_images/doubao/YYYY-MM-DD/

Limitations

  • Dependent on Doubao web interface availability
  • Subject to Doubao's usage limits and terms of service
  • Download location may vary by system/browser configuration
  • Generation time varies based on server load
  • No guaranteed consistency in image quality or style

Integration Points

  • Can be combined with report generation skills (e.g., xiaoxiyouxi-5min-report)
  • Suitable for avatar creation, concept visualization, or illustration needs
  • Can feed into social media content pipelines
  • Useful for rapid prototyping of visual concepts

Comments

Loading comments...