Zyt ai creation
v0.1.0Use Chanjing AI creation APIs to submit image or video generation tasks across multiple models, inspect task status, poll async results, and explicitly downl...
⭐ 0· 69·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included scripts and docs: submit_task, poll_task, get_task, list_tasks and optional download_result. The scripts call Chanjing API endpoints and use local app_id/secret_key — coherent with an API client for Chanjing AI creation.
Instruction Scope
SKILL.md instructs only to submit tasks, poll status, list/get tasks, and download results only when explicitly requested. The included scripts read/write ~/.chanjing/credentials.json (or $CHANJING_CONFIG_DIR/credentials.json) and may open the official login page in the browser when credentials are missing/invalid — this behavior is documented and consistent with the skill purpose.
Install Mechanism
No install spec; this is an instruction-only skill with two small Python helper modules. Nothing is downloaded from arbitrary URLs and no installer runs, which is low-risk and proportionate.
Credentials
The skill does not require external credentials from the registry metadata; it expects the user to provide Chanjing app_id/secret_key in ~/.chanjing/credentials.json (or via CHANJING_CONFIG_DIR). It optionally respects CHANJING_API_BASE if set. This is appropriate, but note it stores access_token and expire_in back into the same credentials file in plaintext — users should be aware of local storage of secrets.
Persistence & Privilege
always is false and the skill is user-invocable; it only writes/reads its own config file (~/.chanjing/credentials.json) and does not modify other skills or system-wide agent settings. It may open the default browser for login flows as documented.
Assessment
This skill appears to be a straightforward Chanjing AI creation client. Before installing, verify you trust the chanjing endpoints (https://open-api.chanjing.cc and https://www.chanjing.cc), and be prepared to store your app_id and secret_key in ~/.chanjing/credentials.json (or set CHANJING_CONFIG_DIR). The scripts will cache access_token and expire_in in that file in plaintext — if that is a concern, keep the directory protected or avoid storing credentials there. Also avoid setting CHANJING_API_BASE to an untrusted URL (the code honors that env var). If you want extra caution, inspect the two Python files (scripts/_auth.py and scripts/_task_api.py) before use and only allow downloads when you explicitly request saving results locally.Like a lobster shell, security has layers — review code before you run it.
latestvk9714vgsfab49wdmse4prvhc9583n9r0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
