AIRILAB
v0.0.1统一调用 AiriLab 图像生成与任务管理能力（MJ 创意渲染 workflowId=0、创意放大 workflowId=16、氛围转换 workflowId=13），并自动处理登录鉴权、项目选择、任务提交、状态轮询与结果回推。用户提到 Midjourney/MJ 文生图、参考图生成、放大超分/4K、天气季节昼...
⭐ 1· 34·0 current·0 all-time
bySiyn Ma@tatekii
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the code and SKILL.md: the package implements AiriLab image generation (MJ/upscale/atmosphere), authentication (phone+OTP), project selection, task submission, polling and result fetching. Required resources (local filesystem, network to cn.airilab.com) are coherent with that purpose.
Instruction Scope
SKILL.md gives precise runtime instructions: the agent should run local python scripts to login, check status, fetch results and start a background worker. It will ask the user only for phone and OTP for login (per the constraints). This is within scope for a wrapper that manages async SaaS jobs, but it requires the agent to execute commands and receive OTPs from the user — a privacy/usability consideration the user should accept explicitly.
Install Mechanism
Registry lists no formal install spec, but the bundle includes post-install.sh which runs pip install -r requirements.txt and configures autostart (systemd user service or cron). The dependency install is simple (requests only) and all downloads go to the Python package index via pip; no unknown remote archives or URL shorteners are used. Still, running post-install.sh will modify user-level services/crontab and install packages locally.
Credentials
The skill declares no required env vars, and the code only optionally uses AIRILAB_HOME (defaults to ~/.openclaw/skills/airilab). It stores the AiriLab token locally in config/.env and project info in project_config.json. It does not request unrelated cloud credentials or external secrets. The phone/OTP interaction is necessary for the stated authentication flow.
Persistence & Privilege
The package includes scripts (post-install.sh, setup-autostart.sh, start-worker.sh) that can enable a user-level systemd service or add a crontab @reboot entry and will start a long-running worker process that polls AiriLab and writes files under the user's home (~/.openclaw). While this persistence is coherent with background job polling, it does grant the skill continuous background presence on the host if the user runs the post-install/autostart steps. Consider whether you want that runtime persistence before enabling autostart.
Assessment
This skill appears to do what it claims (manage AiriLab jobs) and stores only AiriLab tokens and project configs locally. Before installing or running any post-install scripts: 1) review and consent to storing your AiriLab token under ~/.openclaw/skills/airilab/config/.env; 2) be aware post-install can install Python packages and enable a user-level service or crontab to run a background worker — if you don't want a persistent background process, do not run post-install.sh or pass --no-autostart and avoid enabling the systemd/crontab steps; 3) the agent will ask you for phone + OTP to login — supply those only if you trust the skill and account flow; 4) if you want higher assurance, inspect/execute the scripts manually rather than allowing automatic agent execution. If you want me to highlight exact lines that create autostart or persist tokens, say so and I will point them out.Like a lobster shell, security has layers — review code before you run it.
latestvk971k8eth3mxc6y5x0f1cr7s2d843f32
License
MIT-0
Free to use, modify, and redistribute. No attribution required.