Meitu Skills
v1.0.24Comprehensive Meitu AI toolkit for image and video editing. Features include AI poster design, precise background cutout, virtual try-on, e-commerce product...
⭐ 118· 1.1k·4 current·5 all-time
byMeitu.Inc@meituskills
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill requires the meitu CLI and Meitu OpenAPI keys, and its SKILL.md directs the agent to call the CLI for image/video tasks — this aligns with the stated Meitu editing poster/video workflows. Required paths (openclaw.yaml, DESIGN.md, workspace) match the described 'project-mode' behavior.
Instruction Scope
Instructions ask the agent to read/write project files (~/.openclaw/workspace/visual/, ./openclaw.yaml, ./DESIGN.md) and to access credentials (env or ~/.meitu/credentials.json). This is coherent for project-mode workflows but means the agent will persist observations and update project files; users should be aware that project files may be created/modified. The SKILL.md explicitly forbids executing user-supplied scripts and claims safe argument passing to the CLI.
Install Mechanism
No automated install spec is included (instruction-only). The doc recommends a manual npm install -g meitu-cli if the binary is missing. This is lower-risk than automatic downloads or arbitrary code installs.
Credentials
The skill only requests Meitu API credentials (MEITU_OPENAPI_ACCESS_KEY / MEITU_OPENAPI_SECRET_KEY) and access to a credentials file; that is proportionate to calling the Meitu service. No unrelated secrets or cloud credentials are requested.
Persistence & Privilege
The skill writes to project workspace and config files (openclaw.yaml, DESIGN.md, ~/.openclaw/workspace/visual/) to support 'project-mode' memory and outputs. always:false and no autonomous override are in place, but the skill can persist preferences/memory within those paths — review whether you want the agent to modify those local files.
Assessment
This skill appears internally consistent with its Meitu CLI purpose, but review these points before installing: (1) It will call the local 'meitu' binary and requires your Meitu API keys (env vars or ~/.meitu/credentials.json) — prefer environment variables in shared environments. (2) It may read and write project files (./openclaw.yaml, ./DESIGN.md) and a local visual workspace (~/.openclaw/workspace/visual/); if you do not want those files created/modified, avoid running the skill in that directory or remove write permissions. (3) The tool will upload images/videos to Meitu's API as part of generation — do not send sensitive or private images unless you accept that external transmission. (4) No automatic installer is run by the skill; if you manually install 'meitu-cli', verify the package/source first. (5) The SKILL.md and SECURITY.md state restrictions (no arbitrary script execution, safe CLI argument passing) — if you need higher assurance, inspect the meitu CLI binary provenance and avoid storing long-lived credentials in files.Like a lobster shell, security has layers — review code before you run it.
latestvk971az8as19mqee0mge7c35bpn84x8rd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsmeitu
EnvMEITU_OPENAPI_ACCESS_KEY, MEITU_OPENAPI_SECRET_KEY