← Back to Skills Marketplace
563
Downloads
0
Stars
1
Active Installs
3
Versions
Install in OpenClaw
/install huobao-image-generation
Description
Generate images from text prompts or transform existing images using AI with configurable count, watermark, and API key settings.
README (SKILL.md)
AI 火宝
🔥 火山引擎 AI 生图 Skill。支持多种模型。
环境变量
export HUOBAO_API_KEY="\x3Cyour-api-key>"
或使用 --api-key 参数传入。
支持的模型
| 模型 | 说明 |
|---|---|
gemini-2.5-flash-image |
Gemini 2.5 Flash Image |
gemini-2.5-flash-image-preview |
Gemini 2.5 Flash Image Preview |
nano-banana |
Nano Banana |
nano-banana-pro |
Nano Banana Pro |
nano-banana-pro_4k |
Nano Banana Pro 4K |
doubao-seedream-4-5-251128 |
豆包 Seedream 4.5 |
支持的尺寸
| 尺寸 | 说明 |
|---|---|
1x1 |
正方形 |
16x9 |
宽屏 |
9x16 |
竖屏 |
3x4 |
竖屏 |
4x3 |
宽屏 |
功能
文生图 (text2image)
python3 scripts/t2i.py "提示词" --model nano-banana-pro --size 1x1
图生图 (image2image)
python3 scripts/i2i.py --image \x3C图片URL> --prompt "描述" --model nano-banana-pro
参数
| 参数 | 说明 |
|---|---|
prompt |
提示词(必填) |
--model |
模型名称(默认: nano-banana-pro) |
--size |
尺寸(默认: 1x1) |
--count |
生成数量 1-4 (默认: 1) |
--watermark |
是否添加水印 (默认: true) |
--api-key |
API Key(必填) |
--debug |
调试模式 |
示例
# 文生图 - Nano Banana Pro
python3 scripts/t2i.py "一只可爱的猫咪" --model nano-banana-pro --size 1x1 --api-key "sk-xxx"
# 文生图 - Gemini 2.5 Flash
python3 scripts/t2i.py "风景画" --model gemini-2.5-flash-image --size 16x9 --api-key "sk-xxx"
# 图生图
python3 scripts/i2i.py --image "https://example.com/img.jpg" --prompt "动漫风格" --model nano-banana-pro --api-key "sk-xxx"
输出格式
成功返回 JSON:
{
"success": true,
"prompt": "...",
"model": "nano-banana-pro",
"size": "1x1",
"count": 1,
"images": [{"url": "..."}],
"usage": {...}
}
Usage Guidance
This skill's code does what the description says (text→image and image→image) but it sends your API key to https://api.chatfire.site rather than to an obvious official Volcengine endpoint mentioned in the description. Before installing or using it: (1) confirm who operates api.chatfire.site and whether your API key is meant for that service; (2) do not reuse a sensitive/privileged key — create a limited-scope or test key if possible; (3) prefer keys issued by the actual provider named in the description (or ask the author why a proxy is used); (4) if you don't trust the endpoint or the skill owner, do not provide real credentials; (5) if you need to proceed, consider running the script in an isolated environment and monitor outbound network traffic to verify behavior. The registry metadata should declare the required HUOBAO_API_KEY — its absence is an additional red flag. If the author can explain and justify the api.chatfire.site endpoint (for example, it's an official proxy), that would lower the concern.
Capability Analysis
Type: OpenClaw Skill
Name: huobao-image-generation
Version: 1.0.2
The skill claims to be a '火山引擎 AI 生图 Skill' (Volcano Engine AI Image Generation Skill) in SKILL.md, but the Python scripts (scripts/i2i.py, scripts/t2i.py) hardcode the API endpoint to 'https://api.chatfire.site/v1/images/generations'. This discrepancy between the stated service provider and the actual API endpoint is suspicious, as user API keys and image generation prompts are sent to an unverified third-party domain (chatfire.site) rather than one clearly associated with 'Volcano Engine'. Additionally, the scripts allow arbitrary model names to be passed to the API, which could be an API parameter injection vulnerability if the backend is not robust.
Capability Assessment
Purpose & Capability
The skill claims to be a 火山引擎 (Volcengine) image-generation skill supporting multiple models, and the SKILL.md and scripts implement text2image and image2image which matches the high-level purpose. However, the code's API_URL is https://api.chatfire.site/v1/images/generations (a third-party domain) rather than an official Volcengine endpoint. Model names referenced (e.g., gemini-2.5-flash-image, nano-banana) may not map to the actual backend; this provider mismatch is unexplained and disproportionate to the stated purpose.
Instruction Scope
Runtime instructions and included scripts only perform JSON POSTs to the remote API and do not read local secrets or files beyond argv, but they do require an API key (HUOBAO_API_KEY or --api-key) and will transmit it as a Bearer token to api.chatfire.site. The SKILL.md describes Volcengine use, but the instructions direct traffic to an unlisted endpoint — this is outside the expected scope given the description and could lead to credential transmission to an unexpected party.
Install Mechanism
No install specification; this is an instruction+script skill with no downloads or archive extraction. No additional packages or installers are pulled by the skill itself, so there is low install-time risk.
Credentials
SKILL.md and the scripts require an API key (HUOBAO_API_KEY or --api-key) but the registry metadata lists no required environment variables and no primary credential. That mismatch is incoherent. The API key will be sent to api.chatfire.site; if you expected the key to go to Volcengine (or another provider), this could result in secret disclosure to a different service. The number of secrets requested is small (one key), but lacking explanation of the endpoint makes it disproportionate/unjustified.
Persistence & Privilege
The skill does not request persistent/frequent privileges: always:false, no config-path writes, and it does not attempt to modify other skills or system settings. It only runs network requests when invoked.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install huobao-image-generation - After installation, invoke the skill by name or use
/huobao-image-generation - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Changed skill name to “AI 火宝” and updated project branding.
- Updated documentation and descriptions in SKILL.md for improved clarity.
- No changes to supported models, features, parameters, or usage examples.
v1.0.1
- Adds support for multiple image generation models and output sizes.
- Updates environment variable from DOUBAO_API_KEY to HUOBAO_API_KEY.
- Introduces new parameters: --model and --size.
- Expands documentation to list all supported models and size options.
- Script usage updated to reflect model and size selection.
v1.0.0
Initial release of huobao-image-generation.
- Provides Seedream 4.5 AI-powered text-to-image and image-to-image generation.
- Supports prompt-based image creation and style transformation.
- Allows configuration via API key (environment variable or command-line).
- Includes customizable options: image count, watermark, and debug mode.
- Returns results as structured JSON output.
Metadata
Frequently Asked Questions
What is AI 火宝?
Generate images from text prompts or transform existing images using AI with configurable count, watermark, and API key settings. It is an AI Agent Skill for Claude Code / OpenClaw, with 563 downloads so far.
How do I install AI 火宝?
Run "/install huobao-image-generation" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is AI 火宝 free?
Yes, AI 火宝 is completely free (open-source). You can download, install and use it at no cost.
Which platforms does AI 火宝 support?
AI 火宝 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created AI 火宝?
It is built and maintained by 培根666 (@kongweigen); the current version is v1.0.2.
More Skills