modelscope_img_generator
v1.2.0Generate images with ModelScope API. Use for image generation requests. Supports text-to-image + image-to-image; configurable models; use --input-image.
⭐ 0· 32·0 current·0 all-time
byruifeng@windandliberty
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, manifest, SKILL.md, and the Python script all align: the tool needs a MODELSCOPE_API_KEY, accepts prompts and optional input images, supports model selection and LoRA, and saves generated images locally. No unrelated credentials, binaries, or capabilities are requested.
Instruction Scope
Instructions and code stay within the stated purpose (send prompts and optional input images to ModelScope and save the returned image). Important privacy note: any provided input image and the prompt are uploaded (the script encodes input images as base64 and posts them). The script downloads the result from the URL returned by the API — SKILL.md and manifest assert the API endpoint is fixed, but the final image URL returned by the API could point to a storage/CDN host (the script will fetch whatever URL ModelScope returns). This is expected for the task but is worth the user's awareness.
Install Mechanism
There is no install spec (instruction-only with a single script). Dependencies are standard Python packages (requests, pillow) and running via 'uv' is documented. Nothing is downloaded from arbitrary or untrusted URLs and no extracted archives or install scripts are present.
Credentials
Only MODELSCOPE_API_KEY is required and it is declared as the primaryEnv in manifest. The code only reads the provided API key and does not request unrelated secrets or system credentials.
Persistence & Privilege
The skill does not request permanent/always-on inclusion and does not modify other skills or system-wide settings. It writes only the generated image file to the user's working directory (expected behavior).
Assessment
This skill appears to do what it says: it will upload your prompt and any input image to ModelScope's official API and save the returned image in your current working directory. Before installing, confirm you trust ModelScope with any image content or prompts you send (sensitive images may be retained by the service). Provide an API key scoped to your account, and be prepared to revoke it if misused. Note the script will download whatever image URL the API returns (typically ModelScope storage/CDN); if you need stricter guarantees about where assets are hosted, review ModelScope's service docs. Also verify you are comfortable installing/using the 'uv' runner and the Python dependencies (requests, pillow).Like a lobster shell, security has layers — review code before you run it.
latestvk97ean0s7mta835z3zh7rk147s84dprt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.