China Image Gen
v1.0.1国内可用的文生图技能，基于硅基流动（SiliconFlow）API。Use when the user wants to generate images from text in China without VPN. Supports FLUX.1-schnell (free/fast), FLUX.1-dev...
⭐ 0· 192·0 current·0 all-time
by@tobewin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description claim image generation via SiliconFlow; SKILL.md requires curl and a SiliconFlow API key and shows curl calls to api.siliconflow.cn — these are proportionate and expected for this purpose.
Instruction Scope
Runtime instructions focus on building prompts and issuing curl POSTs to SiliconFlow; they also show optional use of python3 or jq to parse JSON and suggest storing the key in ~/.openclaw/.env. No instructions ask to read unrelated files or exfiltrate unrelated data, but the SKILL.md references additional tooling and a config path not declared elsewhere.
Install Mechanism
No install spec and no code files — instruction-only skill. This is lower risk because nothing is written to disk by an installer.
Credentials
SKILL.md requires a single SILICONFLOW_API_KEY which is appropriate for the described API calls. However registry metadata in the package summary did not list required env vars while SKILL.md does — an inconsistency to verify before installing.
Persistence & Privilege
Skill is not always-enabled and does not request elevated system privileges or modify other skills. It can be invoked autonomously by the agent (default), which is normal; consider the usual caution around autonomous plugins that have network access and an API key.
Assessment
This skill is coherent with its stated purpose: it calls SiliconFlow's image-generation API and requires a single SILICONFLOW_API_KEY. Before installing: (1) confirm that the registry metadata and the SKILL.md agree about required environment variables (SKILL.md requests SILICONFLOW_API_KEY while the top-level metadata did not list it), (2) avoid placing high-privilege credentials in a global env if you can — create a dedicated API key with limited quota and revoke it if needed, (3) verify the provider domain (api.siliconflow.cn) and review SiliconFlow's privacy/usage policy and costs, (4) note SKILL.md examples use python3/jq for JSON parsing and reference ~/.openclaw/.env — ensure you are comfortable storing the key there or set the env in a more limited scope, and (5) remember that the agent can call external APIs autonomously by default, so only enable the skill if you trust the provider and the skill's behavior. If you want higher assurance, ask the publisher to update the package metadata to include the required env var and clarify optional tooling (python3/jq).Like a lobster shell, security has layers — review code before you run it.
latestvk977kvx187hyhjv3byxg58rh2983b4jj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎨 Clawdis
Binscurl