← 返回 Skills 市场

Agent Profile Images

Name: Agent Profile Images
Author: maverick-software

作者 maverick-software · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

238

总下载

当前安装

版本数

在 OpenClaw 中安装

/install agent-profile-images

功能描述

Agent Profile Images for OpenClaw Control UI — upload custom avatars, generate themed AI profile images, preview before saving, and persist agent avatars acr...

使用说明 (SKILL.md)

agent-profile-images

name: agent-profile-images
version: 1.0.0
author: Charles Sears
description: Adds agent profile image upload, AI generation, preview/keep-regenerate-cancel flow, and avatar persistence fixes to the OpenClaw Control UI.

What This Skill Adds

1. Agent Profile Image Card in Agents → Overview

Adds a dedicated Profile Image section to the Agents Overview panel with:

current avatar preview
upload button
remove button
theme selector
custom generation instructions
generate button
preview state messaging

2. Avatar Upload RPC

Adds agents.avatar.upload so the Control UI can upload a PNG/JPG/WEBP/GIF image and save it into the agent workspace.

3. AI Avatar Generation RPC

Adds agents.avatar.generate for themed image generation using OpenAI Images.

4. Preview / Keep / Regenerate / Cancel Loop

Generation does not auto-save. Instead:

Generate → preview only
Keep → saves generated image as the agent avatar
Regenerate → requests a new preview
Cancel → discards preview and preserves the previous avatar

5. Persistent Avatar Resolution

Fixes the gateway agent-list/session-utils path so avatar information from workspace IDENTITY.md is reflected correctly across Agents UI, chat UI, refreshes, and reloads.

6. Fresh Identity Reloads on Agents Tab

Fixes stale UI state by forcing the Agents tab to refresh identity data when entering the tab and after avatar-changing actions.

Backend Methods Added

Method	Description
`agents.avatar.upload`	Upload and save a profile image into the agent workspace
`agents.avatar.generate`	Generate a themed avatar preview using OpenAI Images
`agents.avatar.remove`	Remove the current stored avatar

Theme Presets Included

Professional
Sci-Fi
Cyberpunk
Fantasy
Space Opera
Creature Collector
Mascot
Noir

Storage Model

Saved avatars are written into the agent workspace under avatars/ and persisted via IDENTITY.md using:

- Avatar: avatars/profile.png

This reuses the existing Control UI avatar serving path (/avatar/:agentId) and keeps images portable with the agent workspace.

Files Included

The references/ folder contains the feature implementation snapshots for these files:

src/gateway/method-scopes.ts
src/gateway/protocol/index.ts
src/gateway/protocol/schema/agent.ts
src/gateway/protocol/schema/agents-models-skills.ts
src/gateway/protocol/schema/protocol-schemas.ts
src/gateway/protocol/schema/types.ts
src/gateway/server-methods-list.ts
src/gateway/server-methods/agent.ts
src/gateway/server-methods/agents.ts
src/gateway/session-utils.ts
ui/src/ui/app-render.ts
ui/src/ui/app-view-state.ts
ui/src/ui/app.ts
ui/src/ui/types.ts
ui/src/ui/views/agents-panels-overview.ts
ui/src/ui/views/agents.ts

Notes

This skill packages the source-level feature implementation.
A temporary live compiled-bundle hotfix was used during development to unblock testing, but that tactical dist patch is not part of this skill package.
OpenAI image generation is currently the implemented provider path in this package.
The full OpenClaw repo may contain unrelated build/runtime issues outside this feature; this skill is scoped only to agent profile image functionality.

Recommended Publish Changelog

Initial release: agent profile image upload, themed AI generation, preview/keep-regenerate-cancel loop, and refresh-state fixes.

安全使用建议

Before installing: (1) Verify the skill author and provenance — this package has no homepage and an unknown source. (2) Inspect the provided server/gateway snapshots yourself (or have a trusted engineer do so) — they propose adding admin-scoped RPCs and modifying session/gateway code. Confirm that avatar operations truly require admin scope and that method access controls are appropriate. (3) Confirm how image generation credentials are provided: the SKILL.md states OpenAI Images is used but declares no API key or env vars; ensure any provider keys are handled securely (centralized secrets store) and not implicitly assumed. (4) Treat the prompt-injection signal seriously — review SKILL.md and supplied files for any embedded instructions intended to influence model/system prompts or to exfiltrate data. (5) If you lack the capacity to review code, test the skill in an isolated dev/staging environment (not production) and restrict permissions for gateway changes until a full audit is done.

功能分析

Type: OpenClaw Skill Name: agent-profile-images Version: 1.0.0 The skill bundle implements agent profile image management, including local uploads, removal, and AI-themed generation via OpenAI. The implementation follows OpenClaw's architecture, correctly assigning new RPC methods (e.g., `agents.avatar.upload`, `agents.avatar.generate`) to the administrative scope in `src-gateway-method-scopes-ts.txt`. Security controls are present, such as path traversal protections using `assertNoPathAliasEscape` and `isPathWithinRoot` in `src-gateway-server-methods-agents-ts.txt` and `src-gateway-session-utils-ts.txt`. No evidence of malicious intent, data exfiltration, or unauthorized command execution was found.

能力评估

ℹ Purpose & Capability

The skill claims to add UI features (avatar upload, preview, generation) but bundles server/protocol snapshots that add gateway RPCs and schema changes. That can be legitimate for a full-feature feature implementation, but the snapshots also classify agents.avatar.* methods as ADMIN_SCOPE — making avatar upload/generation/removal admin-only. Elevating routine avatar operations to admin-level is unexpected and should be justified.

⚠ Instruction Scope

SKILL.md instructs adding gateway RPCs, session-utils fixes, and persistence via workspace IDENTITY.md. It also states OpenAI Images is the implemented provider but declares no provider credential handling. The pre-scan flagged a 'system-prompt-override' pattern in SKILL.md (prompt-injection signal). The instructions imply backend code changes rather than only client-side UI changes; that expands the trust and impact surface and is not confined to a simple UI plugin.

✓ Install Mechanism

This is instruction-only with no install spec and no binaries to fetch, which minimizes install-time risk. The package contains source snapshots only, so it won't automatically download or execute remote code during install.

⚠ Credentials

SKILL.md mentions using OpenAI Images as the provider but requires no environment variables or primary credential. If the feature makes live calls to OpenAI (or any external provider), an API key or centralized platform credential would normally be needed. The lack of declared credentials is an inconsistency that could indicate missing documentation or an attempt to rely on platform-global secrets without explicit declaration.

ℹ Persistence & Privilege

The skill does not request always:true and has no install actions, but the included snapshots propose adding admin-scoped gateway methods and modifying session/gateway utilities. That represents a change with elevated privilege implications (gateway-level RPCs), so it should be reviewed before enabling on production systems despite not demanding persistent presence itself.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install agent-profile-images
安装完成后，直接呼叫该 Skill 的名称或使用 /agent-profile-images 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: agent profile image upload, themed AI generation, preview/keep-regenerate-cancel loop, and refresh-state fixes.

元数据

Slug agent-profile-images

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题