← 返回 Skills 市场

Cartoon Pet Generator

Name: Cartoon Pet Generator
Author: juliantsaiii

作者 juliantsaiii · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

371

总下载

当前安装

版本数

在 OpenClaw 中安装

/install cartoon-pet-generator

功能描述

Generate cute cartoon-style pet images (dogs, cats, etc.) using code. Use when user asks for cartoon pet drawings, cute animal illustrations, or simple pet a...

使用说明 (SKILL.md)

Cartoon Pet Generator

Generate adorable cartoon-style pet images programmatically without any AI image generation API.

What This Skill Does

Creates SVG-based cartoon pets (dogs, cats, rabbits, etc.) and converts them to PNG format. Works entirely with code - no external APIs or image generation services needed.

Quick Start

Generate a Cartoon Dog

node /path/to/scripts/generate_pet.js dog /tmp/dog.png

Generate a Cartoon Cat

node /path/to/scripts/generate_pet.js cat /tmp/cat.png

Custom Colors

node /path/to/scripts/generate_pet.js dog /tmp/dog.png --body-color "#FFB347" --ear-color "#FF8C00"

Supported Pets

dog - Cute cartoon dog
cat - Adorable cartoon cat
rabbit - Fluffy cartoon rabbit
bear - Cuddly cartoon bear

Customization Options

Option	Description	Example
`--body-color`	Main body color	`#D2691E`
`--ear-color`	Ear color	`#8B4513`
`--bg-color`	Background color	`#87CEEB`
`--size`	Image size (width)	`400`

How It Works

Generate SVG - Node.js creates an SVG with the pet design
Convert to PNG - Uses rsvg-convert (or convert) to convert SVG → PNG
Output - Returns the path to the PNG file

Requirements

Node.js (for SVG generation)
rsvg-convert or ImageMagick convert (for SVG to PNG conversion)

Example Usage in Conversation

User: "给我画一只小狗"

Response: Run the script and send the image:

node scripts/generate_pet.js dog /tmp/cute_dog.png

Then send with: \x3Cqqimg>/tmp/cute_dog.png\x3C/qqimg>

安全使用建议

This skill appears coherent and limited to generating SVG pets and converting them to PNG. Before installing or running it: (1) ensure Node.js and an SVG converter (rsvg-convert or ImageMagick convert) are installed; (2) review the script's use of child_process.execSync—avoid passing untrusted input into command-line arguments to prevent command injection (the script parses CLI args and then invokes external converters); (3) note the default output path (/tmp) and avoid running with elevated privileges; and (4) if you plan to serve generated images to users, consider sanitizing or validating inputs (colors/paths) to avoid unexpected content in SVGs. If you want higher assurance, paste the remainder of the script (the truncated tail) so it can be re-reviewed for any additional shell/network operations.

功能分析

Type: OpenClaw Skill Name: cartoon-pet-generator Version: 1.0.0 The skill contains a command injection vulnerability in `scripts/generate_pet.js`. The script takes the `outputPath` argument directly from user input and embeds it into a shell command executed via `execSync` (using `rsvg-convert` or `convert`) without sanitization. An attacker could provide a filename containing shell metacharacters (e.g., backticks or semicolons) to execute arbitrary commands on the host system.

能力评估

✓ Purpose & Capability

Name/description match the deliverables. The SKILL.md and the included Node.js script implement SVG generation for multiple pet types and convert SVG → PNG using rsvg-convert or ImageMagick, which is coherent with the stated purpose.

✓ Instruction Scope

Runtime instructions are narrowly focused: run the Node script to create an SVG and convert it to PNG, then return/send the image. The SKILL.md does not instruct reading unrelated files, sending data to external endpoints, or accessing environment secrets.

✓ Install Mechanism

No install spec is provided (instruction-only skill). The only runtime dependencies are Node.js and an SVG-to-PNG converter (rsvg-convert or convert), which is reasonable and proportionate for the functionality.

✓ Credentials

The skill requires no environment variables, credentials, or config paths. The script uses child_process.execSync to call external converters, which is expected for invoking rsvg-convert/convert; no secrets are requested.

✓ Persistence & Privilege

always is false and the skill does not request persistent or elevated platform privileges. It does not attempt to modify other skills or global agent configuration.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install cartoon-pet-generator
安装完成后，直接呼叫该 Skill 的名称或使用 /cartoon-pet-generator 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release - generate cute cartoon pets (dog, cat, rabbit, bear) using SVG code, no AI API required

元数据

Slug cartoon-pet-generator

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题