自动广告生成器

What to consider before installing: - Do not run curl | bash installers from unknown domains without inspection; the README recommends piping a script from jimeng.jianying.com to install the Dreamina CLI — this is the highest-risk action here. Prefer installing CLIs from official release pages or package managers and review the installer content first. - The skill expects DREAMINA_API_KEY (reasonable) and REMOVE_BG_API_KEY (declared required but marked optional in docs). The code also calls OpenAI (DALL·E) but does not declare OPENAI_API_KEY — ask the author to clarify required environment variables. - Dependencies are incomplete: package.json only lists Pillow but code imports requests and openai. Running the code may fail or silently attempt to reach external services. Review and install dependencies in a controlled environment (container or sandbox). - Review the code paths that call subprocess.run(['dreamina', ...]) to ensure the Dreamina CLI used is the official binary you trust; if you must use Dreamina, install it from a vetted source and confirm its behavior. - If you handle sensitive images or credentials, avoid giving API keys to third-party services you don't control. Consider running the PIL-only path (local generation) if you want to avoid remote AI services. - If you want to proceed: ask the publisher to (1) remove the curl|bash recommendation or replace it with a vetted install guide, (2) declare all required env vars (including OPENAI_API_KEY if used), and (3) add missing runtime dependencies to package.json. Otherwise run the tool in an isolated environment and audit network activity.