Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Minimax Image Gen

v1.1.0

使用 Minimax Image API 生成图片。支持文生图、13+ 种风格预设、跨平台。 neuroXY 专属画图技能! Use when: 用户想生成图片、AI 画图、创建图像。 NOT for: 视频生成、动画制作。

0· 263·5 current·6 all-time
byNeuroblue@bluestar-34

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for bluestar-34/minimax-image-gen.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Minimax Image Gen" (bluestar-34/minimax-image-gen) from ClawHub.
Skill page: https://clawhub.ai/bluestar-34/minimax-image-gen
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: MINIMAX_API_KEY
Required binaries: python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install minimax-image-gen

ClawHub CLI

Package manager switcher

npx clawhub@latest install minimax-image-gen
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, SKILL.md, and the included script all align: the tool calls a Minimax image-generation API, accepts prompts/presets, and saves/previews images. Required binary (python3) and required env var (MINIMAX_API_KEY) match the stated purpose.
!
Instruction Scope
The SKILL.md and script instruct reading an API key from env or from ~/.openclaw/openclaw.json (documented in SKILL.md). That's reasonable, but the runtime code explicitly disables SSL certificate verification for both the API POST and image downloads (ssl.check_hostname=False; verify_mode=ssl.CERT_NONE). This weakens transport security and could expose the API key or image data to MitM attacks. The script also attempts to read OpenClaw config files in home and parent paths — this is described in SKILL.md but means the skill will try to access local config files that may contain other credentials.
Install Mechanism
No install spec (instruction-only skill) and included Python script; nothing is downloaded or executed from arbitrary URLs during install. Standard library modules are used. Low installation risk, but runtime network activity occurs (to api.minimaxi.com).
Credentials
The skill only requires MINIMAX_API_KEY (declared as primary credential), which is proportionate. However, the code will also attempt to extract an API key from ~/.openclaw/openclaw.json and a sibling path; if that file contains other provider credentials, the skill will read them while searching for a Minimax key. This behavior is documented but increases the risk surface compared with using only an explicit env var.
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges or modify other skills. It does not self-enable or write system-wide config beyond creating output files in the specified output directory.
What to consider before installing
This skill appears to do what it claims (generate images via Minimax) and only requires MINIMAX_API_KEY, but there are two things to check before installing or running it: 1) SSL verification is disabled in the script when calling the API and downloading images (ssl.check_hostname=False; verify_mode=ssl.CERT_NONE). That means an attacker on your network could intercept requests and steal your API key or responses. If you plan to use this skill, either run it only on trusted networks or edit the script to remove the lines that disable certificate verification so TLS is enforced. 2) The script will try to read ~/.openclaw/openclaw.json (and a parent-path variant) to auto-load an API key. If that file contains other credentials, the script will open it while searching for a Minimax key. To minimize risk, prefer supplying MINIMAX_API_KEY via an explicit environment variable and inspect/remove any sensitive keys from the config file first. Other suggestions: review the full script locally before running, confirm the base_url (https://api.minimaxi.com) matches the official endpoint you expect, and run in a contained environment if you are not comfortable modifying the code. If the SSL disabling is fixed and you supply the key via env only, the skill would be coherent and lower-risk.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎨 Clawdis
Binspython3
EnvMINIMAX_API_KEY
Primary envMINIMAX_API_KEY
latestvk977d58m2tcr4xe8wbej1h8bh5834bzw
263downloads
0stars
1versions
Updated 4h ago
v1.1.0
MIT-0

🎨 minimax-image-gen

neuroXY 专属 AI 画图技能 | 基于 MiniMax Image API

GitHub Version Platform License

📌 什么时候用

使用这个 skill:

  • "画一张图片"
  • "生成一张可爱猫咪的照片"
  • "用动漫风格画少女"
  • "创建一个赛博朋克风格的城市图"

不要用这个 skill:

  • 视频生成 → 找其他工具
  • 动画制作 → 找其他工具

🚀 快速开始

# 基本用法
python {baseDir}/scripts/gen.py -p "可爱的猫"

# 使用风格预设
python {baseDir}/scripts/gen.py -s "小猫" --preset 萌宠

# 生成并预览
python {baseDir}/scripts/gen.py -p "风景" --preview

⚙️ 配置

API Key 配置

方式一:环境变量(推荐)

# Windows
$env:MINIMAX_API_KEY = "your-api-key"

# Mac/Linux
export MINIMAX_API_KEY="your-api-key"

方式二:OpenClaw 配置

{
  "skills": {
    "entries": {
      "minimax-image-gen": {
        "enabled": true,
        "env": {
          "MINIMAX_API_KEY": "your-key"
        }
      }
    }
  }
}

方式三:自动加载 本技能会自动从 ~/.openclaw/openclaw.json 读取已配置的 Minimax API Key。

获取 API Key

访问:https://platform.minimaxi.com/user-center/interface-key

📖 使用指南

命令行参数

参数简写说明默认值
--prompt-p图片描述(必填)-
--subject-s主体描述(用于预设)-
--count-c生成数量 (1-9)1
--aspect-ratio-a宽高比1:1
--model-m模型image-01
--preset-风格预设-
--style-风格类型-
--out-dir-o输出目录./output
--preview-生成后预览false
--list-presets-列出所有预设-

宽高比选项

尺寸适用场景
1:11024×1024头像、方形图
16:91280×720壁纸、横幅
4:31152×864照片
3:21248×832摄影
2:3832×1248竖版人物
3:4864×1152竖版肖像
9:16720×1280手机壁纸
21:91344×576超宽屏

模型说明

模型说明
image-01默认模型,高质量,支持所有宽高比
image-01-live动漫/生活风格,支持风格参数

🎭 风格预设

本技能内置 13 种 精心调优的风格预设:

动漫/二次元

预设说明推荐宽高比
动漫少女动漫少女风格,大眼睛,精致五官3:4
漫画风漫画风格,简洁线条1:1

艺术风格

预设说明推荐宽高比
水彩画水彩艺术风格,梦幻氛围16:9
浮世绘日本传统浮世绘风格16:9
像素艺术8-bit 复古游戏风格1:1

人物/肖像

预设说明推荐宽高比
证件照专业证件照,白底3:4
肖像专业人像摄影,影棚灯光3:2

创意/科幻

预设说明推荐宽高比
赛博朋克霓虹灯光,未来科技感16:9

风景/建筑

预设说明推荐宽高比
风景画油画风格风景16:9
建筑摄影现代建筑摄影3:2

动物/宠物

预设说明推荐宽高比
萌宠可爱宠物风格,大眼睛1:1

产品/美食

预设说明推荐宽高比
美食摄影餐厅风格美食1:1
产品图商业产品摄影1:1

使用预设

# 使用预设 + 主体
python gen.py -s "穿校服的少女" --preset 动漫少女

# 纯手动
python gen.py -p "赛博朋克城市" --preset 赛博朋克

仅 image-01-live 可用风格

风格值说明
漫画漫画风格
元气元气满满
中世纪中世纪风格
水彩水彩画风

💻 示例

示例 1:生成萌宠图片

python gen.py -s "英国短毛猫" --preset 萌宠 --preview

示例 2:创建风景壁纸

python gen.py -p "日落时的海滩" -a 16:9 -c 3 --preview

示例 3:动漫少女

python gen.py -s "粉色头发的女孩" --preset 动漫少女 --style 元气 --preview

示例 4:赛博朋克城市

python gen.py -p "未来的东京街头" --preset 赛博朋克 -c 4 --preview

示例 5:列出所有预设

python gen.py --list-presets

🔧 高级用法

自定义输出目录

python gen.py -p "图片" -o "E:/my-images"

禁用 Prompt 优化

python gen.py -p "具体描述" --no-optimizer

保存到指定位置并预览

python gen.py -p "猫" -o "C:/Users/asus/Pictures" --preview

📁 输出

  • 目录: ./output (默认)
  • 格式: PNG
  • 命名: minimax-{时间戳}-{描述}-{序号}.png

⚠️ 错误处理

错误码说明解决方案
1002限流稍后重试
1004API Key 错误检查 Key 是否正确
1008余额不足充值
1026内容敏感修改 prompt
2013参数错误检查参数
2049无效 API Key重新获取 Key

🔐 安全特性

  • ✅ 输入验证和清理
  • ✅ API Key 不写入日志
  • ✅ 敏感信息错误提示
  • ✅ SSL/TLS 加密传输
  • ✅ 超时保护

🌍 跨平台支持

平台预览方式
Windows默认图片查看器
macOSPreview / Finder
Linuxxdg-open

📝 更新日志

v1.1.0 (2026-03-18)

  • 🎉 添加 13 种风格预设
  • ✨ 支持风格类型 (漫画/元气/中世纪/水彩)
  • 🔧 优化跨平台兼容性
  • 🛡️ 增强安全性
  • 📖 完善文档

v1.0.0 (2026-03-17)

  • 🎨 初始版本
  • ✨ 基本生成功能

📄 License

MIT License - Created by neuroXY


有问题随时问 neuroXY!🦐

Comments

Loading comments...