Image to Image API
v1.0.3Transform existing images into new ones using AI via Media.io OpenAPI. Apply style transfers, artistic filters, and creative transformations with models like...
⭐ 0· 116·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md and scripts/ files consistently implement an Image-to-Image client for Media.io and require a Media.io API key. However, the registry metadata at the top of the provided manifest lists 'Required env vars: none' while SKILL.md and the Python code expect API_KEY — this inconsistency should be resolved.
Instruction Scope
SKILL.md instructs to set API_KEY, install requests, and call the local Skill.invoke method. The Python code only reads API_KEY and the provided params and issues HTTPS requests to openapi.media.io; it does not attempt to read unrelated files or extra environment variables.
Install Mechanism
There is no install spec; the skill is instruction-only with a small Python helper and a JSON API manifest. A single runtime dependency (requests) is suggested — reasonable and proportionate.
Credentials
The skill requires a single API key (API_KEY) and uses it only for X-API-KEY header to openapi.media.io, which is appropriate. The only issue is the manifest/registry metadata mismatch that claims no required env vars; confirm which is authoritative. No other secrets are requested.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system configs. It can be invoked by the agent (default), which is normal for skills and not by itself a security issue.
Assessment
This skill appears to do what it says: call Media.io's image-to-image endpoints using an API key. Before installing, verify the skill's source (homepage is listed in SKILL.md but registry shows 'source: unknown'), and ensure you provide a Media.io API key that is scoped/limited if possible and not reused across unrelated services. Resolve the manifest inconsistency: the registry metadata claims no required env vars while SKILL.md and the Python code require API_KEY. Confirm billing/usage implications on your Media.io account and rotate the key if you stop using the skill. Finally, note the skill enforces requests only to openapi.media.io (good), and the only runtime dependency is 'requests' (installable via pip).Like a lobster shell, security has layers — review code before you run it.
latestvk97d9r2s8kzqr3s2gkr9ptvrjh835vcv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.