← Back to Skills Marketplace
1608
Downloads
0
Stars
9
Active Installs
1
Versions
Install in OpenClaw
/install openai-image-cli
Description
Generate, edit, and manage images via OpenAI's GPT Image and DALL-E models.
Usage Guidance
This skill appears to be a wrapper around a third-party npm CLI (@versatly/openai-image-cli) and legitimately needs an OPENAI_API_KEY. Before installing or using it: 1) Verify the npm package and GitHub repository (review code, recent commits, and maintainers) to ensure it does nothing unexpected. 2) Be aware the SKILL.md expects you to install a global npm package even though the registry lists no install spec—the agent will not auto-install it. 3) Use a scoped OpenAI key or billing limits if possible (don't expose a full-access key). 4) Avoid installing global packages with elevated privileges (sudo) unless you trust the source. 5) If you need stronger guarantees, request the skill author add an explicit install spec and correct the declared requirements (bins/envs) in the registry so the skill's metadata matches its runtime instructions.
Capability Analysis
Type: OpenClaw Skill
Name: openai-image-cli
Version: 1.0.0
The skill bundle is classified as suspicious primarily due to the `npm install -g @versatly/openai-image-cli` command found in `SKILL.md`. While this is a standard method for installing CLI tools, it represents a significant supply chain risk as it executes arbitrary code from an external npm package with global system permissions. This constitutes a risky capability without clear malicious intent within the provided instructions. There is no evidence of prompt injection attempts against the agent, data exfiltration, or other directly malicious instructions in the analyzed files.
Capability Assessment
Purpose & Capability
The SKILL.md describes a CLI that uses the OpenAI API and expects an OPENAI_API_KEY and an 'openai-image' binary — that is coherent with an image-generation CLI. However the registry metadata (requirements block shown earlier) lists no required env vars or binaries, while the SKILL.md metadata declares bins: ["openai-image"] and envs: ["OPENAI_API_KEY"]. This mismatch is an incoherence that could cause surprising behavior (the agent may assume no credentials are needed while the runtime expects them).
Instruction Scope
The instructions are focused on installing and using an external CLI, using local image files, stdin, and a local history/config. They do not direct the agent to exfiltrate arbitrary host files or read unrelated system state. Still, the SKILL.md instructs installation of a third-party npm CLI and expects the agent to invoke that binary — that expands runtime scope beyond an instruction-only skill and should be explicitly declared in the registry.
Install Mechanism
There is no install spec in the registry, but the SKILL.md tells users to run 'npm install -g @versatly/openai-image-cli'. Relying on a user-installed npm package is a legitimate design choice but the absence of an explicit install spec in the skill metadata is an incoherence. Installing a global npm package pulls code from the public registry (moderate risk); the package and its GitHub repo should be audited before installing.
Credentials
The only credential actually needed by the CLI is OPENAI_API_KEY, which is appropriate for this purpose. But the registry's declared required env vars is empty while SKILL.md expects OPENAI_API_KEY; this discrepancy could mislead users about credential needs. No other unrelated secrets are requested.
Persistence & Privilege
No elevated privileges are requested: always is not set, model invocation is not disabled, and there are no required config paths. The skill does not request permanent presence or extra privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openai-image-cli - After installation, invoke the skill by name or use
/openai-image-cli - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: Full support for GPT Image models, DALL-E, generate/edit/vary/batch commands
Metadata
Frequently Asked Questions
What is OpenAI Image CLI?
Generate, edit, and manage images via OpenAI's GPT Image and DALL-E models. It is an AI Agent Skill for Claude Code / OpenClaw, with 1608 downloads so far.
How do I install OpenAI Image CLI?
Run "/install openai-image-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenAI Image CLI free?
Yes, OpenAI Image CLI is completely free (open-source). You can download, install and use it at no cost.
Which platforms does OpenAI Image CLI support?
OpenAI Image CLI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenAI Image CLI?
It is built and maintained by G9Pedro (@g9pedro); the current version is v1.0.0.
More Skills