Volcseed

即梦 Volcseed 智能修图。Use when: 用户要按提示词改图、需提交参考图 URL 与轮询任务。

Security Scan

The skill's code, instructions, and required environment variables match its stated purpose (submitting and polling Volcseed image-edit tasks); nothing in the package contradicts that purpose, but you must trust the endpoints you configure in AIZNT_PROXY_URLS because the skill will send your TS_TOKEN and image data to them.

Purpose & Capability

Name/description state an image-editing submit/fetch integration. The skill requires TS_TOKEN and a JSON map of proxy URLs and contains code that posts prompts and image URLs or fetches task status — these are exactly what an integration like this needs.

Instruction Scope

SKILL.md and scripts only instruct the agent to submit edits and poll results via the configured endpoints. The runtime does not read unrelated files, shell history, or other environment variables beyond TS_TOKEN and AIZNT_PROXY_URLS.

Install Mechanism

No install spec; code is included as small JS scripts. Nothing is downloaded from third-party URLs or written to arbitrary system locations. This is low risk from an installation perspective.

Credentials

Requested env vars (TS_TOKEN as primary credential and AIZNT_PROXY_URLS containing endpoint templates) are appropriate for this integration. However, those proxy URLs are arbitrary: the skill will send the Bearer TS_TOKEN and payloads to whatever URLs are present, so you must ensure AIZNT_PROXY_URLS only contains trusted endpoints and that TS_TOKEN has least-privilege scope.

Persistence & Privilege

The skill is not always-on and does not request system-wide persistence or modify other skills. It runs only when invoked and performs only HTTP calls as coded.

Assessment

This skill appears coherent and small: review and trust the values you put into AIZNT_PROXY_URLS because the skill will send your TS_TOKEN and image/prompt data to those endpoints. Verify that TS_TOKEN has limited scope and rotate it if you reuse it elsewhere. Only set AIZNT_PROXY_URLS to URLs you control or trust (ensure the keys volcseededit_submit and volcseededit_fetch are present and correct). If you need stronger assurance, inspect the environment that will provide AIZNT_PROXY_URLS (who wrote it, is it generated by your platform?), or run the scripts in an isolated environment with a test token first.

即梦 Volcseed (aiznt-volcseed)

通过天树 ts_xxx 与凭证中的 aiznt_proxy_urls 调用 volcseededit 提交与查询。

配置

与 aiznt-images 等同类技能相同：TS_TOKEN、AIZNT_PROXY_URLS（JSON）。TsClaw Skills 页「同步天树凭证」会批量写入。

命令

node scripts/volcseed.js submit --prompt "改成水彩风" --image-urls '["https://example.com/a.png"]'
node scripts/volcseed.js fetch --task-id <task_id>

URL 键

• volcseededit_submit
• volcseededit_fetch（{task_id}）