← Back to Skills Marketplace
Poster Forge
by
huuuwnnn-droid
· GitHub ↗
· v1.0.0
· MIT-0
162
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install poster-forge
Description
Universal image and poster generator with Chinese/English text support. Use when asked to create posters, social media images, cover images, infographics, co...
Usage Guidance
This skill appears to do what it says, but be aware it performs network operations: it downloads fonts from GitHub raw URLs and sends prompts to Pollinations.ai to generate base images, and it uses headless Chromium to render HTML templates. If you have privacy concerns about sending prompts/images to an external service, run the script in an isolated environment or use the HTML/text engines only (Chromium/PIL) which can operate offline. Also ensure you have Python 3 and Pillow installed, and that running headless Chromium with --no-sandbox is acceptable in your environment. Finally, review licensing for any fonts or third-party services if you plan commercial use.
Capability Analysis
Type: OpenClaw Skill
Name: poster-forge
Version: 1.0.0
The skill is functional but contains security vulnerabilities in `scripts/generate.py`. It uses `subprocess.run` to execute `curl` for downloading external fonts and images, and it renders HTML templates using a headless Chromium browser with the `--no-sandbox` flag. Crucially, the HTML templates are constructed using f-strings that directly inject user-provided arguments (like `--title` and `--code-content`) without sanitization, which could allow for injection attacks within the browser context. While these behaviors align with the stated purpose of generating posters, the lack of input validation and the use of risky browser flags meet the criteria for a suspicious classification.
Capability Assessment
Purpose & Capability
Name/description (poster/image generation, Chinese/English text support) align with the included files and runtime requirements. The script implements three engines (AI, HTML, text) and requires Python + Pillow, curl, and optionally Chromium — all reasonable for the stated purpose.
Instruction Scope
SKILL.md instructs the agent to run scripts/generate.py which performs only poster-related tasks. The script downloads fonts from GitHub raw URLs, fetches images from Pollinations.ai (https://image.pollinations.ai), writes temp HTML files and screenshots, and runs headless Chromium. It does not read unrelated system files or expect other credentials. Note: it does send prompts and image requests over the network to external services.
Install Mechanism
No install spec is provided (instruction-only + one script), so nothing is written to system install locations. The script itself uses subprocess calls to curl and Chromium but does not perform any packaged installs or download arbitrary executables. Font downloads are from GitHub raw URLs (public font files).
Credentials
The skill requests no environment variables, no credentials, and no config paths. All external accesses (font raw URLs and Pollinations.ai) are consistent with generating images; there is no unexplained credential access or secret exfiltration.
Persistence & Privilege
always is false and the skill does not request permanent agent presence or modify other skills/configs. It writes temporary files (fonts in the system temp dir and temporary HTML/screenshot files) within its own runtime scope.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install poster-forge - After installation, invoke the skill by name or use
/poster-forge - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Universal image/poster generator. 3 engines: AI (Pollinations.ai), HTML (Chromium screenshot), PIL text. Chinese text support. Presets for Xiaohongshu/WeChat/Instagram/Twitter.
Metadata
Frequently Asked Questions
What is Poster Forge?
Universal image and poster generator with Chinese/English text support. Use when asked to create posters, social media images, cover images, infographics, co... It is an AI Agent Skill for Claude Code / OpenClaw, with 162 downloads so far.
How do I install Poster Forge?
Run "/install poster-forge" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Poster Forge free?
Yes, Poster Forge is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Poster Forge support?
Poster Forge is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Poster Forge?
It is built and maintained by huuuwnnn-droid (@huuuwnnn-droid); the current version is v1.0.0.
More Skills