Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

千问文生图

v1.0.0

阿里云千问文生图模型(Qwen-Image)技能,支持图像生成。当用户要求AI生成图片、画图、文生图、text-to-image,或提到千问、阿里云生图时使用。支持中英文提示词,可指定画面尺寸、风格参数等。

0· 85·0 current·0 all-time
bywoodylan@lanlan314

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lanlan314/qwen-image-gen-lan.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "千问文生图" (lanlan314/qwen-image-gen-lan) from ClawHub.
Skill page: https://clawhub.ai/lanlan314/qwen-image-gen-lan
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install qwen-image-gen-lan

ClawHub CLI

Package manager switcher

npx clawhub@latest install qwen-image-gen-lan
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill's stated purpose (Qwen image/text-to-image generation) matches the runtime instructions calling DashScope/Qwen endpoints, but the registry metadata lists no required credentials while the SKILL.md explicitly requires DASHSCOPE_API_KEY. That mismatch is unexplained and reduces trust.
Instruction Scope
SKILL.md gives concrete curl examples to a dashscope.aliyuncs.com endpoint, describes request construction, response parsing, and error codes. The instructions do not attempt to read unrelated files or exfiltrate other data; scope is limited to calling the image API and returning image URLs.
Install Mechanism
No install spec and no code files (instruction-only) — minimal disk/write footprint. This is low risk from install mechanics.
!
Credentials
The instructions require an API key via the DASHSCOPE_API_KEY environment variable, but the skill metadata declares no required env vars or primary credential. The skill will use an external service credential; the registry should explicitly declare this. Ensure only a purpose-scoped key would be provided.
Persistence & Privilege
always is false and the skill is user-invocable with normal autonomous invocation allowed. It does not request persistent system privileges or attempt to modify other skills or agent-wide configs.
What to consider before installing
This skill implements an Alibaba Cloud (DashScope/Qwen-Image) text-to-image integration and will call external APIs using an API key. Before installing: (1) ask the publisher to update the registry metadata to list DASHSCOPE_API_KEY as a required credential (the SKILL.md already expects it); (2) only provide a scoped API key (least privilege), and confirm billing/costs and rate limits for your account; (3) verify the endpoint and publisher/source (no homepage provided) — absence of a verifiable source increases risk; (4) if you don’t want the agent to call external services autonomously, restrict or withhold the API key or disable autonomous invocation for this skill. If the publisher cannot justify the metadata mismatch, treat the skill as untrusted.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fjhar48gfkv547va5k01sqh83ze4z
85downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

千问文生图技能 (qwen-image-gen)

快速使用

基本文生图(同步接口,推荐)

使用 qwen-image-2.0-pro 模型(效果最佳):

curl -X POST 'https://dashscope.aliyuncs.com/api/v1/services/aigc/multimodal-generation/generation' \
  -H 'Content-Type: application/json' \
  -H "Authorization: Bearer $DASHSCOPE_API_KEY" \
  -d '{
    "model": "qwen-image-2.0-pro",
    "input": {
      "messages": [{
        "role": "user",
        "content": [{"text": "你的提示词"}]
      }]
    },
    "parameters": {
      "negative_prompt": "低分辨率,低画质,肢体畸形,手指畸形",
      "prompt_extend": true,
      "watermark": false,
      "size": "2048*2048"
    }
  }'

可用模型

模型特点推荐场景
qwen-image-2.0-pro效果最好,文字渲染强首选
qwen-image-2.0速度快,效果均衡加速场景
qwen-image-max真实感最强写实摄影
qwen-image-plus价格优惠常规使用

常用参数

参数说明默认值
size分辨率,格式 宽*高2048*2048
n生成数量(2.0系列1-6张,其他1张)1
prompt_extend智能优化提示词true
watermark添加水印false
negative_prompt反向提示词-
seed随机种子(0-2147483647)随机

推荐分辨率

qwen-image-2.0系列:

  • 2048*2048 - 1:1 方图(默认)
  • 2688*1536 - 16:9 宽屏
  • 1536*2688 - 9:16 竖屏
  • 2368*1728 - 4:3
  • 1728*2368 - 3:4

qwen-image-max / plus系列:

  • 1664*928 - 16:9(默认)
  • 1328*1328 - 1:1
  • 928*1664 - 9:16
  • 1472*1104 - 4:3
  • 1104*1472 - 3:4

执行流程

  1. 检查 API Key:确保 DASHSCOPE_API_KEY 环境变量已设置
  2. 构建请求:根据用户提示词和参数构建 JSON 请求
  3. 调用 API:使用 curl 发送同步请求
  4. 解析结果:从响应中提取图像 URL
  5. 返回结果:将图像 URL 返回给用户

响应示例

成功时返回:

{
  "output": {
    "choices": [{
      "finish_reason": "stop",
      "message": {
        "content": [{
          "image": "https://dashscope-result-xxx.png?Expires=xxx"
        }]
      }
    }]
  },
  "usage": {
    "height": 2048,
    "image_count": 1,
    "width": 2048
  },
  "request_id": "xxx"
}

注意:图像 URL 有效期 24 小时,请及时保存!

错误处理

常见错误码:

  • InvalidApiKey - API Key 无效或未设置
  • InvalidParameter - 参数错误
  • RateLimitExceed - 请求过于频繁

参考资料

详细 API 文档和异步接口说明请参阅 references/api.md

Comments

Loading comments...