ClawHub

FLUX.2-pro Image Generation

v1.1.0

Generate images using Black Forest Labs FLUX.2-pro via Azure AI Foundry. Use when asked to create, generate, or produce images, illustrations, photos, artwor...

⭐ 0· 234·0 current·0 all-time
by@zwcih
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, SKILL.md, references/api.md, and scripts/generate.mjs all describe the same capability: calling a FLUX.2-pro endpoint to generate one image. The only required secrets (FLUX_ENDPOINT, FLUX_API_KEY) are appropriate for that purpose.
✓
Instruction Scope
Runtime instructions and the bundled script only read the declared env vars and perform image generation and optional Canvas overlay. They write the generated image to disk (expected) and log output. There are no steps that read unrelated files, scan system state, or post data to other endpoints.
✓
Install Mechanism
No install spec is provided (instruction-only), and included code is a small local Node script. The SKILL.md suggests optionally installing the 'canvas' npm package and a CJK font for text overlay — those are reasonable, explicit developer/user actions and not automatically fetched by the skill.
✓
Credentials
Only FLUX_ENDPOINT and FLUX_API_KEY are required and declared; primaryEnv is FLUX_API_KEY. The code does not access other environment variables or credential/config paths.
✓
Persistence & Privilege
The skill is not marked always:true, is user-invocable, and does not modify other skills or system-wide configuration. Allowing autonomous invocation is the platform default and not by itself a problem here.
Assessment
This skill appears to do what it claims. Before installing: ensure the FLUX_ENDPOINT you supply is the intended Azure Foundry resource and the FLUX_API_KEY is scoped/rotated appropriately (treat it like any API secret). The local script writes image files to disk — confirm you are comfortable with that output path. If you need Chinese text overlay, you'll have to install the 'canvas' package and provide a CJK font file locally. Also confirm your Node runtime supports fetch and AbortSignal.timeout (or run with a compatible Node version). Finally, follow content-policy guidance for prompts and avoid sharing your API key in public contexts.

Like a lobster shell, security has layers — review code before you run it.

latestvk974se3bvaec1zvret97nc4g1583an2y

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvFLUX_ENDPOINT, FLUX_API_KEY
Primary envFLUX_API_KEY

Comments