Image to Cartoon Generator

Convert photos and images into cartoon-style illustrations using AI via Media.io OpenAPI. Transforms real photos into animated cartoon characters. image to c...

Security Scan

The skill's stated purpose (convert images to cartoons via Media.io) matches its requirements and instructions: it only needs curl and a Media.io API key and contains only API call + polling guidance with no unrelated permissions or installs.

Purpose & Capability

Name/description, required binary (curl), and required env var (MEDIAIO_API_KEY) all match the declared Media.io OpenAPI usage. No unrelated credentials, binaries, or config paths are requested.

Instruction Scope

SKILL.md instructs the agent to call Media.io endpoints (credits, create task, poll result) and to accept image URLs; it does not instruct reading arbitrary files, scanning system state, or exfiltrating unrelated data. It explicitly warns not to expose API keys in logs/responses.

Install Mechanism

Instruction-only skill with no install spec or downloads. Lowest-risk install profile; relies on curl being available.

Credentials

Only one required environment variable (MEDIAIO_API_KEY) is declared and used as the API key header. This is proportionate to the skill's functionality.

Persistence & Privilege

always is false and the skill does not request persistent system privileges or modify other skills/configs. disable-model-invocation is false (normal), but this is not combined with other concerning behaviors.

Assessment

This skill is coherent and limited in scope, but before installing: (1) ensure MEDIAIO_API_KEY is a Media.io developer key and rotate it if accidentally exposed; (2) only supply image URLs you own or are authorized to process (the API expects publicly reachable URLs); (3) be aware Media.io billing/credits apply—the skill checks credits and will fail if insufficient; (4) the skill will make network requests to openapi.media.io using your API key—avoid pasting the key into chat outputs or logs; (5) confirm curl is available in the execution environment; (6) review Media.io's privacy/terms if processing sensitive or biometric images. If you need local file uploads rather than URL-based processing, this skill is not suitable.

Media.io Image To Cartoon Generator Skill

Overview

This skill calls Media.io OpenAPI to run cartoon conversion using model code effects-cartoon. The API is asynchronous:

1. Submit generation request and get task_id.
2. Poll task result endpoint until the task is finished.

When To Use

• The user wants to convert an image to cartoon style.
• The user can provide an image URL reachable by Media.io servers.
• The user wants task-based generation with polling.

When Not To Use

• The user asks for local file upload only (this API expects image URL input).
• The user asks for non-Media.io providers.
• The user asks for real-time synchronous image output in one call.

Requirements

Environment Variables

Variable	Required	Description
MEDIAIO_API_KEY	Yes	Media.io OpenAPI key, used in header X-API-KEY.

Base Headers

• Content-Type: application/json
• X-API-KEY: $MEDIAIO_API_KEY

Supported Endpoints

1) Query Credits

• Method: POST
• Endpoint: https://openapi.media.io/user/credits
• Body: {}
• Purpose: check available credits before generation.

2) Create Cartoon Task

• Method: POST
• Endpoint: https://openapi.media.io/generation/effects/effects-cartoon
• Body:

{
	"data": {
		"images": "https://example.com/input.jpg",
		"ratio": "9:16",
		"batch": "1"
	}
}

• Required fields:
  • data.images (string URL)
• Optional fields:
  • data.ratio (string): 9:16, 16:9, 1:1, 4:3, 3:4, 3:2, 2:3
  • data.batch (string): 1, 2, 3, 4

3) Query Task Result

• Method: POST
• Endpoint: https://openapi.media.io/generation/result/{task_id}
• Body: {}
• Path parameter:
  • task_id (string, required)

Request and Response Contract

Common Success Envelope

{
	"code": 0,
	"msg": "",
	"data": {},
	"trace_id": "..."
}

Create Task Response

• On success, data.task_id is returned.

Task Result Response

• data.status can be one of the following values:
  • waiting: queued
  • processing: running
  • completed: completed successfully
  • failed: failed
  • timeout: timed out
• data.reason: provides additional context (e.g., success or error message)
• When status is completed:
  • data.result is an array of output objects with generated URLs
  • Each result object contains val (internal path), preview (public HTTPS URL), and status (completion status)

Standard Invocation Flow

1. Call user/credits to verify balance.
2. Call effects-cartoon with data.images and optional data.ratio, data.batch.
3. Extract task_id.
4. Poll generation/result/{task_id} every 3 to 5 seconds.
5. Stop when status is completed or failed.
6. Return output URLs from data.result when completed.

cURL Examples

Query Credits

curl --request POST \
	--url https://openapi.media.io/user/credits \
	--header 'Content-Type: application/json' \
	--header "X-API-KEY: $MEDIAIO_API_KEY" \
	--data '{}'

Create Cartoon Task

curl --request POST \
	--url https://openapi.media.io/generation/effects/effects-cartoon \
	--header 'Content-Type: application/json' \
	--header "X-API-KEY: $MEDIAIO_API_KEY" \
	--data '{
	"data": {
		"images": "https://example.com/input.jpg",
		"ratio": "9:16",
		"batch": "1"
	}
}'

Query Task Result

curl --request POST \
	--url https://openapi.media.io/generation/result/<task_id> \
	--header 'Content-Type: application/json' \
	--header "X-API-KEY: $MEDIAIO_API_KEY" \
	--data '{}'

Successful Response Example

{
	"code": 0,
	"msg": "",
	"data": {
		"task_id": "effect-86f0f82a-36dc-4a7c-928a-721a18ef482f",
		"status": "completed",
		"reason": "success",
		"result": [
			{
				"val": "aicloudtmp/550160908/3/202603/1/combo_tm_alg-20260317165022-802800-60eb3-dwt.png",
				"preview": "https://url_to_generated_image.png",
				"status": "completed"
			}
		]
	},
	"trace_id": "a18315ba568b5c34407808d12cbc8457"
}

Response fields when status is completed:

• data.task_id: unique task identifier
• data.status: completed indicates successful completion
• data.reason: success indicates no error occurred
• data.result: array of output objects, each containing:
  • val: internal file path of the generated asset
  • preview: publicly accessible HTTPS URL for the generated asset
  • status: completed for each result item

Error Handling Guidance

• Treat code != 0 as failure.
• Typical authentication errors:
  • 374004: not authenticated. Apply for an APP KEY at https://developer.media.io/.
• Typical request validation error:
  • 490000: params error
• Typical billing/credits error:
  • 490505: insufficient credits. Recharge before invoking generation APIs.
• Always include trace_id in logs for troubleshooting.

Agent Behavior Requirements

• Validate that input contains a non-empty image URL before calling the create endpoint.
• Do not claim immediate output after task creation; always poll by task_id.
• If credits are insufficient, return a clear message and stop instead of retry loops.
• Avoid exposing raw API keys in logs or responses.

Safety and Compliance Notes

• Only process user-provided or user-authorized images.
• Do not imply identity verification or biometric certainty from generated images.
• Generated output is synthetic media and should be presented as edited content.

References

• Media.io platform: https://developer.media.io/
• API documentation: https://platform.media.io/docs/