Huo15 Comic Character
PassAudited by ClawScan on May 10, 2026.
Overview
This skill appears to do the advertised character-card generation, but it uses a paid Seedream/Ark API key that is not declared in the registry requirements.
Use this skill only if you intend to send character descriptions to Volcengine Ark/Seedream and pay for generated images. Configure a limited ARK_API_KEY, set provider budget limits, and check the script size and output directory before running.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the skill on many characters can spend money through the configured provider account.
This shows that the skill intentionally calls an external paid image-generation service and discloses a per-image cost.
读 script.json → 调 Seedream 4.0 → 每个角色输出 3 张图 ... 3 张 × N 角色 × ¥0.08/张
Review the number of characters before running, use provider-side spending limits, and run it only when you intend to generate paid images.
The skill needs access to a provider credential that can likely incur charges on the user’s account.
The code requires an Ark API key and sends it as a bearer token, while the registry requirements say no env vars or primary credential are required.
self.api_key = api_key or os.environ.get("ARK_API_KEY", "") ... raise RuntimeError("缺少 ARK_API_KEY 环境变量") ... "Authorization": f"Bearer {self.api_key}"Use a limited-scope or dedicated ARK_API_KEY where possible, set billing limits, and the skill publisher should declare this credential requirement in metadata.