Security checks across malware telemetry and agentic risk
This skill appears to be a legitimate ecommerce image generator, but it needs review because it can send API keys and product prompts to arbitrary custom proxy URLs and partially prints key prefixes.
Install only if you are comfortable sending product descriptions, prompts, and provider credentials to the selected image service or to a proxy you fully trust. Avoid custom *_BASE_URL settings unless you control the endpoint, do not share provider-check output, and use least-privilege API keys that can be rotated.
req_url = url
headers = {"Authorization": f"Bearer {key}", "Content-Type": "application/json"}
resp = requests.post(
req_url,
headers=headers,
json={def generate_stability(key: str, prompt: str, base_url: str = "", model: str = "") -> bytes:
url = base_url or DEFAULT_URLS["stability"]
resp = requests.post(
url,
headers={"Authorization": f"Bearer {key}", "Accept": "application/json"},
files={"none": ""},def generate_tongyi(key: str, prompt: str, base_url: str = "", model: str = "") -> bytes:
"""通义千问图像生成 — 同步接口（推荐，适用于 qwen-image-2.0-pro 等模型）。"""
url = base_url or DEFAULT_URLS["tongyi"]
resp = requests.post(
url,
headers={"Authorization": f"Bearer {key}", "Content-Type": "application/json"},
json={def generate_doubao(key: str, prompt: str, base_url: str = "", model: str = "") -> bytes:
"""豆包 Seedream（火山方舟）— 使用 ARK_API_KEY 鉴权。"""
url = base_url or DEFAULT_URLS["doubao"]
resp = requests.post(
url,
headers={"Authorization": f"Bearer {key}", "Content-Type": "application/json"},
json={data = resp.json()
# 同步接口直接返回图片 URL
img_url = data["output"]["choices"][0]["message"]["content"][0]["image"]
return requests.get(img_url, timeout=60).content
def generate_doubao(key: str, prompt: str, base_url: str = "", model: str = "") -> bytes:)
resp.raise_for_status()
img_url = resp.json()["data"][0]["url"]
return requests.get(img_url, timeout=60).content
GENERATORS = {**Key获取:** https://platform.openai.com/api-keys
```javascript
const response = await fetch("https://api.openai.com/v1/images/generations", {
method: "POST",
headers: {
"Content-Type": "application/json",formData.append("aspect_ratio", "1:1"); // "1:1" | "16:9" | "9:16" etc
// formData.append("negative_prompt", "blurry, distorted");
const response = await fetch("https://api.stability.ai/v2beta/stable-image/generate/core", {
method: "POST",
headers: {
"Authorization": `Bearer ${apiKey}`,```javascript
// Step 1: 提交任务
const submitRes = await fetch(
"https://dashscope.aliyuncs.com/api/v1/services/aigc/text2image/image-synthesis",
{
method: "POST",**Key获取:** https://console.volcengine.com/ark → API Key管理
```javascript
const response = await fetch("https://ark.cn-beijing.volces.com/api/v3/images/generations", {
method: "POST",
headers: {
"Content-Type": "application/json",**Key获取:** https://platform.openai.com/api-keys
```javascript
const response = await fetch("https://api.openai.com/v1/images/generations", {
method: "POST",
headers: {
"Content-Type": "application/json",formData.append("aspect_ratio", "1:1"); // "1:1" | "16:9" | "9:16" etc
// formData.append("negative_prompt", "blurry, distorted");
const response = await fetch("https://api.stability.ai/v2beta/stable-image/generate/core", {
method: "POST",
headers: {
"Authorization": `Bearer ${apiKey}`,66/66 vendors flagged this skill as clean.