ClawHub

LinkFoxAI

v1.0.2

调用 LinkFox AI 开放平台 AI 作图/视频 API（换模特、抠图、扩图、场景裂变、智能修图、套图、姿势裂变、带货口播等）。适用场景：(1) AI 任务创建与结果轮询，(2) 通过 api-call 调用任意开放平台接口，(3) 素材连通性测试。

⭐ 1· 324·0 current·0 all-time
byBrave Lin@xxxx3
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the provided code and SKILL.md: the package is a client for LinkFox AI image/video APIs and exposes commands for creating tasks, polling results, uploading images, and issuing arbitrary platform calls. All required network targets and flows relate to the stated purpose.
ℹ
Instruction Scope
SKILL.md instructs the agent to spawn long-running sessions for asynchronous image generation, to poll results, and to optionally upload local images (base64). Those behaviors are appropriate for this API client, but be aware the skill can read local files when you run the upload-base64 command and can issue arbitrary platform endpoints via api-call.
✓
Install Mechanism
No install spec or external downloads are present; the skill is instruction + included Python script. That minimizes install-time risk (no archive fetches or package installs).
ℹ
Credentials
SKILL.md declares LINKFOXAI_API_KEY only, which is proportionate. The script also supports alternative credentials (LINKFOXAI_APP_ID and LINKFOXAI_APP_SECRET) and optional overrides (LINKFOXAI_BASE_URL, LINKFOXAI_IMAGE_EDIT_PATH). This is reasonable but the documentation should mention the APP_ID/APP_SECRET options to avoid surprise.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no install-time persistence. It runs as an invoked skill or via sessions_spawn as documented.
Assessment
This skill appears to do exactly what it says: call LinkFox AI image/video APIs. Before installing, consider: (1) Only provide a LinkFox API credential you trust — images you upload are sent to the third-party service and may contain sensitive data; (2) the CLI can read local files for base64 upload (upload-base64), so avoid running that command on sensitive files; (3) the api-call command lets the agent call arbitrary LinkFox endpoints, so limit the credential's permissions if possible; (4) the code also accepts APP_ID/APP_SECRET and optional BASE_URL overrides (these are supported but not emphasized in SKILL.md); and (5) metadata/version fields in the package have minor inconsistencies (cosmetic). If you need stricter guarantees, review the full script and the LinkFox platform privacy/security terms, and consider using a dedicated service account with minimal privileges.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dhzz90g1c2bjjqzcjcw1smn836zgq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🦊 Clawdis
EnvLINKFOXAI_API_KEY

Comments