← Back to Skills Marketplace
229
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install taizi-alicloud-ai-image
Description
Generate images with Model Studio DashScope SDK using Qwen Image generation models (qwen-image-max, qwen-image-plus-2026-01-09). Use when implementing or doc...
Usage Guidance
This skill appears to legitimately implement Alicloud (DashScope) image generation with Qwen models, but it will require and try to load a DASHSCOPE_API_KEY (from the DASHSCOPE_API_KEY env var or ~/.alibabacloud/credentials) and will also load .env files from the current directory and repo root. Before installing or running: 1) do not put sensitive keys into shared .env or workspace files unless you trust the skill; 2) verify the DASHSCOPE_API_KEY you provide has minimal permissions and is rotated if shared; 3) review the included scripts (they download images from URLs and will make network calls) and ensure that behavior is acceptable; and 4) note the registry metadata omission (no required env declared) — you should ensure the platform prompts for the API key or add it manually. Overall this looks functionally correct, but the undeclared credential access is a meaningful inconsistency.
Capability Analysis
Type: OpenClaw Skill
Name: taizi-alicloud-ai-image
Version: 1.0.0
The skill facilitates image generation via Alibaba Cloud's DashScope SDK but contains high-risk behaviors and a vulnerability. The script `scripts/generate_image.py` automatically searches for and reads sensitive API keys from `~/.alibabacloud/credentials`. Additionally, the `resolve_reference_image` function allows for arbitrary local file reads by checking if a provided string is a file path and reading its bytes without sanitization; this could be exploited to exfiltrate sensitive files (e.g., SSH keys) to the model provider's API if the `reference_image` parameter is manipulated.
Capability Assessment
Purpose & Capability
Name/description match the code: it calls DashScope ImageGeneration with qwen-image models. However the skill metadata declares no required environment variables or primary credential, while both SKILL.md and the script require DASHSCOPE_API_KEY (or credentials in ~/.alibabacloud/credentials). That mismatch is disproportionate to the declared registry requirements.
Instruction Scope
Runtime instructions and the included script read environment variables, load .env files (from CWD and repo root found via .git), and load credentials from ~/.alibabacloud/credentials. The script also downloads reference images and generated image URLs via urllib. These behaviors are consistent with an image provider integration but the script will read local files that may contain secrets (unexpected given metadata) and will perform network fetches.
Install Mechanism
There is no automated install spec (instruction-only) which minimizes install-time risk. The SKILL.md recommends installing the dashscope Python package in a venv; the script will fail if dashscope isn't installed. No remote archives or obscure download URLs are used by the skill itself.
Credentials
The skill requires DASHSCOPE_API_KEY and supports reading dashscope_api_key from ~/.alibabacloud/credentials and ALIBABA_CLOUD_PROFILE/ALICLOUD_PROFILE, but the registry lists no required env or primary credential. The number and type of env/config accesses are reasonable for an Alibaba Cloud SDK integration, but the omission from metadata is an inconsistency the user should be aware of.
Persistence & Privilege
The skill does not request persistent 'always' inclusion and does not attempt to modify other skills or system-wide agent settings. Its runtime activity (reading env/credentials, writing output images under workspace) is within expected scope for a provider integration.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install taizi-alicloud-ai-image - After installation, invoke the skill by name or use
/taizi-alicloud-ai-image - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
taizi-alicloud-ai-image v1.0.0
- Initial release: Standardizes image generation using Alibaba Cloud Model Studio Qwen Image models via DashScope SDK.
- Defines a normalized `image.generate` request/response mapping for consistent integration.
- Supports key parameters: prompt, negative_prompt, size, style, seed, and reference_image.
- Provides quickstart examples for CLI and Python, error handling guidance, and operational tips.
- Includes detailed usage instructions for Telegram (and other channel) delivery, caching, and output location.
- Clearly documents supported model names: `qwen-image-max` and `qwen-image-plus-2026-01-09`.
Metadata
Frequently Asked Questions
What is Taizi Alicloud Ai Image?
Generate images with Model Studio DashScope SDK using Qwen Image generation models (qwen-image-max, qwen-image-plus-2026-01-09). Use when implementing or doc... It is an AI Agent Skill for Claude Code / OpenClaw, with 229 downloads so far.
How do I install Taizi Alicloud Ai Image?
Run "/install taizi-alicloud-ai-image" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Taizi Alicloud Ai Image free?
Yes, Taizi Alicloud Ai Image is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Taizi Alicloud Ai Image support?
Taizi Alicloud Ai Image is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Taizi Alicloud Ai Image?
It is built and maintained by fresh3 (@fresh3); the current version is v1.0.0.
More Skills