Doubao Image Generator — AI 文生图工具 based on SeeDream 5.0

使用字节跳动豆包 Doubao SeeDream 模型生成高质量图片。支持文生图、AI 绘图、插画创作等功能。

Key things to consider before installing/running: 1) Metadata mismatch: the registry claims no required env vars, but the scripts require ARK_API_KEY — confirm the skill author/source and insist the package metadata be corrected to declare ARK_API_KEY as required. Don't rely solely on registry fields. 2) Inspect before running: you should review the shipped scripts locally (they are included) and confirm the API endpoint (ark.cn-beijing.volces.com) and model name match what you expect. The code is readable; if you can't inspect, avoid running. 3) Limit information exposure: the environment check prints current user, hostname, working dir, and the first 10 characters of ARK_API_KEY. That is convenient for debugging but leaks local info to whoever can see the terminal. Run the scripts in a trusted, isolated environment (or remove those printouts) if you are concerned. 4) Network fetch risk: the skill will download image URLs returned by the API — those URLs may point to external hosts and will be fetched without additional validation. If you must run it, consider running in a network-restricted environment or auditing the returned URLs before automatic downloading. 5) Secrets handling: supply ARK_API_KEY only to trusted code. Prefer setting the env var in a session (not checked into files) and verify there are no hard-coded keys (the package asserts none). 6) Source provenance: the skill lists 'Source: unknown' and placeholder GitHub links. Favor installing only from known/trusted sources or official repositories. Ask the publisher to provide a real homepage/repo and fix metadata inconsistencies. If you want, I can point out the exact lines in the scripts that print system info or the API key preview and suggest precise edits to harden them (e.g., remove whoami/pwd prints, stop displaying any part of the API key, add URL validation before downloading).

Type: OpenClaw Skill Name: yy756127197-doubao-image Version: 2.0.0 The `doubao-image` skill bundle is a well-structured and professional tool designed to generate AI images using the ByteDance Doubao SeeDream model via the official Volcengine ARK API. It includes both Bash and Python implementations (`doubao-image-generate.sh` and `doubao-image-generate.py`) that handle API authentication securely via environment variables and manage image downloads to a local directory. The code is transparent, follows security best practices (such as using Python for safe JSON handling in shell scripts), and lacks any signs of malicious intent, data exfiltration, or prompt injection. All files, including the extensive documentation and environment check scripts, are consistent with the stated purpose of the tool.