Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ai Intelligent Image Generation

AI 图像生成,文生图 + 图生图。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 43 · 1 current installs · 1 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The SKILL.md claims text-to-image, image-to-image, DALL·E and Stable Diffusion integration, and a Python/FastAPI app, but the packaged skill contains no code or declared dependencies. The skill declares no required env vars or credentials even though DALL·E and hosted model APIs normally require API keys and Stable Diffusion may require model files or GPU drivers. Directing users to clone a GitHub repo (not bundled) is inconsistent with an instruction-only registry entry.
!
Instruction Scope
Runtime instructions tell the user/agent to run git clone, pip install -r requirements.txt, and python app.py — actions that will download and execute arbitrary external code. The SKILL.md does not explain how API keys or model weights are provided, nor does it restrict what the cloned repo may do. There are no explicit steps to inspect or sandbox the downloaded code.
!
Install Mechanism
Although the registry has no formal install spec, the SKILL.md recommends cloning https://github.com/openclaw-skills/ai-intelligent-image-generation and installing requirements. Fetching and executing code from an external GitHub repo and running pip install -r can introduce arbitrary third-party code; the repo owner is not verified in the registry metadata (source: unknown), increasing risk.
!
Credentials
No required environment variables or credentials are declared, yet the description references DALL·E API and Stable Diffusion — services that normally need API keys, tokens, or local model files. This omission is disproportionate and suggests either the SKILL.md is incomplete or it expects the agent to prompt for or grab secrets dynamically, which is not declared.
Persistence & Privilege
The skill does not request elevated or persistent privileges (always: false) and does not declare config paths or credentials to store. It does, however, instruct manual cloning and local execution, which would run with whatever privileges the user/agent provides.
What to consider before installing
This skill is suspicious, not clearly malicious: it only contains a README and tells you to clone and run a GitHub project that is not bundled or verified. Before installing or running anything, verify the GitHub repository exists and review its code and requirements.txt. Expect to need API keys (e.g., OpenAI/DALL·E) or model files; do not provide secrets blindly. If you decide to run it, do so in an isolated environment (container/VM) with limited network access, and inspect third-party packages the project installs. Prefer skills that declare required env vars, include their code or an audited install spec, and have a verifiable homepage or owner.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk97b4rczdpyv664e0hy4njtass832js1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🤖 Clawdis

SKILL.md

AI 智能图像生成

描述

AI 图像生成,文生图 + 图生图。

功能

  • 文生图(文本生成图片)
  • 图生图(图片风格转换)
  • 图片编辑(智能编辑)
  • 批量生成(批量处理)
  • 模型定制(自定义模型)

定价

  • 基础版:¥99/月(1000 张)
  • 专业版:¥499/月(10000 张)
  • 企业版:¥1999/月(无限张)

适用场景

  • 内容创作
  • 广告设计
  • 电商图片
  • 社交媒体

技术栈

  • Python + FastAPI
  • Stable Diffusion
  • DALL-E API
  • 图片处理

安装

git clone https://github.com/openclaw-skills/ai-intelligent-image-generation
cd ai-intelligent-image-generation
pip install -r requirements.txt
python app.py

创建:2026-03-13 作者:OpenClaw Skills Team

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…