Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Image-2 Skill

v1.0.1

GPT-4o Image Generation & Editing Skill - Create, edit, transform, and analyze images using GPT-4o native image-2 API. Supports text-to-image, inpainting, ou...

0· 64·0 current·0 all-time
by@gpt

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for gpt/image-2.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Image-2 Skill" (gpt/image-2) from ClawHub.
Skill page: https://clawhub.ai/gpt/image-2
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: OPENAI_API_KEY
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install image-2

ClawHub CLI

Package manager switcher

npx clawhub@latest install image-2
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the requested dependency (openai) and the code. The only required environment variable is OPENAI_API_KEY which is appropriate for a skill that calls OpenAI image APIs. Declared models, saving behavior, and prompt-enhancement features align with image generation/editing purpose.
Instruction Scope
SKILL.md and the code direct the agent to read/save image files, download images from arbitrary URLs, and convert local files/URLs to base64 for API consumption. This is expected for editing/generation workflows, but it means the skill will read any file path or URL provided in the conversation context—so provide only safe/intentional paths and URLs. The SKILL.md does not instruct reading unrelated system files or other environment variables.
Install Mechanism
Install uses the official 'openai' npm package declared in package.json. There are no downloads from personal servers, shorteners, or unknown archives in the install metadata; this is a standard Node dependency and proportionate to the task.
Credentials
Only OPENAI_API_KEY is required and declared as primaryEnv. The code uses process.env.OPENAI_API_KEY and no other secrets or unrelated credentials are requested. This is proportionate for calling OpenAI APIs.
Persistence & Privilege
always: false and no special system persistence is requested. The skill writes generated images to ./generated-images (its own directory) which is expected behavior and not a privilege escalation or modification of other skills or system-wide configuration.
Assessment
This skill appears coherent and implements what it claims: it calls OpenAI via the official npm package and saves/reads images locally. Before installing/using it, consider: (1) Only provide image file paths or URLs you trust—the skill will read local files and download remote images when asked. (2) Any images you send to the API will be transmitted to OpenAI — review privacy/data handling and billing implications for your OPENAI_API_KEY. (3) Use an API key with limited scope/quotas if possible, monitor usage, and rotate keys if you suspect misuse. (4) If you want further assurance, review the remainder of the JS file (functions truncated here) and run the skill in a sandboxed environment first. Overall there are no red flags in dependencies, env vars, or installation method.
scripts/image-generator.js:33
Environment variable access combined with network send.
!
scripts/image-generator.js:100
File read combined with network send (possible exfiltration).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎨 Clawdis
EnvOPENAI_API_KEY
Primary envOPENAI_API_KEY

Install

Nodenpm i -g openai
latestvk978z9b50g4r40v3jsxse2amd985k3hx
64downloads
0stars
2versions
Updated 2d ago
v1.0.1
MIT-0

Image-2 Skill

Create, edit, transform, and analyze images with GPT-4o's native image generation API

When to Use This Skill

Use this skill whenever the user needs to:

  • Generate images from text descriptions ("画一张...", "生成图片...", "create an image of...")
  • Edit existing images with natural language ("把背景去掉", "add a sunset", "换成蓝色")
  • Create variations of an image ("生成几个变体", "make 4 variations")
  • Analyze/describe images ("这张图是什么", "describe this image", "提取文字")
  • Remove backgrounds ("去除背景", "remove background")
  • Style transfer ("变成水彩风格", "make it look like Van Gogh")
  • Create marketing visuals ("设计海报", "make a social media post")
  • Product photography ("产品图", "product shot on white background")
  • UI/UX mockups ("界面设计", "app mockup", "website screenshot")

Core Workflows

Workflow 1: Text-to-Image Generation

When the user describes an image they want to create:

  1. Enhance the prompt — Automatically add quality boosters:

    • Append professional photography/art terms based on context
    • Add lighting, composition, and mood details if not specified
    • Specify output format and dimensions if needed
  2. Call the API — Use generateImage() with the enhanced prompt:

    const result = await generateImage(enhancedPrompt, { size, quality, style });
    
  3. Save and present — Download the image to the project directory and show the user:

    • Save to ./generated-images/ by default
    • Return the file path and a brief description

Workflow 2: Image Editing

When the user wants to modify an existing image:

  1. Locate the source image — Find the image file path from the conversation context
  2. Parse the edit intent — Understand what changes the user wants
  3. Call the edit API — Use editImage() with the source and instruction:
    const result = await editImage(imagePath, editInstruction, { mask: maskPath });
    
  4. Present the result — Show the edited image and describe what changed

Workflow 3: Image Analysis

When the user asks about an image:

  1. Get the image — From file path or URL
  2. Analyze with GPT-4o Vision — Use describeImage():
    const result = await describeImage(imageSource, question);
    
  3. Report findings — Present the analysis in a structured format

Workflow 4: Batch Generation

When the user needs multiple images:

  1. Parse the batch request — Understand variations needed
  2. Generate in parallel — Call generateImage() for each variant
  3. Organize results — Save with descriptive filenames

Prompt Enhancement Rules

When generating images, automatically enhance the user's prompt:

Quality Boosters (always append unless user specifies quality)

professional quality, high resolution, sharp details

Context-Based Additions

User IntentAuto-Add
Product photo"studio lighting, clean background, commercial photography"
Portrait"professional portrait photography, natural lighting"
Social media"eye-catching, vibrant colors, modern design"
Illustration"detailed illustration, professional artist quality"
Logo/branding"clean vector style, scalable, minimal details"
Architecture"architectural visualization, realistic rendering"
Food"appetizing, food styling, professional food photography"
UI mockup"clean design, modern interface, pixel-perfect"

Size Recommendations

Use CaseRecommended Size
Social media post1024x1024 (square)
Story/vertical1024x1792
Banner/landscape1792x1024
Product listing1024x1024
Presentation1792x1024
Wallpaper1792x1024

Style Presets

Quick style references for common requests:

Preset NameStyle Description
productClean white background, studio lighting, commercial photography
lifestyleNatural setting, warm lighting, aspirational mood
minimalistSimple composition, negative space, clean lines
vintageRetro color grading, film grain, nostalgic mood
futuristicNeon accents, dark background, sci-fi aesthetic
watercolorSoft edges, pastel palette, artistic brush strokes
3d-renderOctane render, realistic materials, dramatic lighting
animeJapanese animation style, vibrant, expressive
sketchPencil drawing, hand-drawn, artistic
flat-designVector style, bold colors, geometric shapes

API Reference

generateImage(prompt, options)

Generate a new image from text description.

Parameters:

  • prompt (string) — Image description (auto-enhanced by this skill)
  • options (object):
    • size1024x1024 | 1024x1792 | 1792x1024 (default: 1024x1024)
    • qualitystandard | hd (default: standard)
    • stylevivid | natural (default: vivid)
    • modelgpt-image-2 | dall-e-3 (default: gpt-image-2)
    • saveTo — File path to save the image (default: ./generated-images/)

Returns: { success, url, localPath, revisedPrompt }

editImage(imagePath, prompt, options)

Edit an existing image with natural language instructions.

Parameters:

  • imagePath (string) — Path to the source image
  • prompt (string) — Edit instruction
  • options (object):
    • mask — Path to mask image (white = edit area, black = keep)
    • size — Output size
    • modelgpt-image-2 | dall-e-3 (default: gpt-image-2)

Returns: { success, url, localPath }

generateVariations(imagePath, options)

Generate creative variations of an existing image.

Parameters:

  • imagePath (string) — Path to the source image
  • options (object):
    • count — Number of variations 1-4 (default: 2)
    • size — Output size

Returns: { success, variations: [{ url, localPath }] }

describeImage(imageSource, question)

Analyze an image using GPT-4o Vision.

Parameters:

  • imageSource (string) — File path or URL of the image
  • question (string|null) — Specific question about the image (default: general description)

Returns: { success, description }

downloadImage(url, savePath)

Download a generated image to local storage.

Parameters:

  • url (string) — Image URL from generation API
  • savePath (string|null) — Local file path (default: auto-generated in ./generated-images/)

Returns: { success, localPath }

Error Handling

ErrorCauseResolution
Invalid API keyOPENAI_API_KEY not set or invalidCheck environment variable
Content policy violationPrompt violates safety guidelinesRephrase the prompt
Rate limit exceededToo many requestsWait and retry with backoff
Image too largeSource image exceeds size limitResize to under 4MB
TimeoutGeneration took too longSimplify prompt or retry

Best Practices

  1. Always enhance prompts — Don't pass raw user input directly to the API
  2. Save locally — Download generated images; URLs expire after 1 hour
  3. Use appropriate sizes — Match the output size to the use case
  4. Prefer gpt-image-2 — Better quality and text rendering than dall-e-3
  5. Batch thoughtfully — Generate 2-4 images max per request to avoid rate limits
  6. Describe edits clearly — Be specific about what to change and where

Changelog

v1.1.0

  • Added GPT-4o native image generation support (gpt-image-2 model)
  • Added automatic prompt enhancement workflow
  • Added image download and local save functionality
  • Added style presets for quick reference
  • Added batch generation workflow
  • Improved error handling and documentation

v1.0.0

  • Initial release with DALL-E 3 support
  • Basic generate, edit, variations, and describe functions

Tags: image-generation AI-art GPT-4o image-2 gpt-image-2 visual-creation marketing product-photos illustration design openai dall-e image-editing background-removal style-transfer ui-mockup

Comments

Loading comments...