← 返回 Skills 市场
473
总下载
0
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install gen-image
功能描述
AI生成图片,支持Kolors/FLUX/Qwen-Image等模型(需SiliconFlow API)
使用说明 (SKILL.md)
AI 图片生成
使用 SiliconFlow API 调用 Kolors、FLUX、Qwen-Image 等模型生成图片。
Generate Image
curl -X POST "https://api.siliconflow.cn/v1/images/generations" \
-H "Authorization: Bearer $SILICONFLOW_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"model": "Kolors/Kolors",
"prompt": "your image description",
"image_size": "1024x1024",
"num_inference_steps": 20
}'
Available Models
Kwai-Kolors/Kolors- High quality image generation (正确ID)black-forest-labs/FLUX.1-schnell- Fast generationblack-forest-labs/FLUX.1-dev- FLUX dev versionQwen/Qwen-Image- Qwen image generation
注意:模型ID可能更新,可通过
curl -s "https://api.siliconflow.cn/v1/models" -H "Authorization: Bearer $SILICONFLOW_API_KEY" | jq '.data[].id'查询最新列表
Parameters
prompt: Image description (required)image_size:1024x1024,1024x1792,1792x1024(default: 1024x1024)num_inference_steps: 1-50 (default: 20)negative_prompt: Things to avoid (optional)seed: Random seed (optional)
API Key
Get your API key from: https://cloud.siliconflow.cn
Set environment variable:
export SILICONFLOW_API_KEY="your-api-key"
Or configure in OpenClaw:
{
skills: {
entries: {
"siliconflow-image": {
enabled: true,
env: {
SILICONFLOW_API_KEY: "your-api-key"
}
}
}
}
}
安全使用建议
This skill appears to do what it claims: call SiliconFlow to generate images and save them locally. Before installing: (1) only provide a SiliconFlow API key you trust and consider its scope/limits on the provider side; (2) add jq to the environment or update the skill metadata to include jq in required binaries — the script and examples expect jq and will fail otherwise; (3) be aware the script will download any URL returned by the API (if the API response were malicious or compromised it could cause the agent to fetch unexpected hosts), so run first in a safe environment or audit API responses; (4) note minor doc mismatches (model ID variants and the OpenClaw config example key name differ from the skill slug) — these are usability issues, not direct security blockers. If you do not fully trust the SiliconFlow endpoint, do not provide your API key or test in an isolated environment first.
功能分析
Type: OpenClaw Skill
Name: gen-image
Version: 1.0.0
The skill is vulnerable to shell injection in `scripts/generate.sh` because user-provided variables such as `$PROMPT`, `$MODEL`, and `$SIZE` are directly expanded within a double-quoted string passed to `curl`. This allows for arbitrary command execution if a user provides a prompt containing shell metacharacters (e.g., backticks or `$(...)`). While the skill's functionality for image generation via the SiliconFlow API (api.siliconflow.cn) appears legitimate, the lack of input sanitization poses a significant security risk.
能力评估
Purpose & Capability
Name/description, required binary (curl), and required credential (SILICONFLOW_API_KEY) match the behavior in SKILL.md and scripts: the skill posts prompts to https://api.siliconflow.cn and downloads returned images. There are no unrelated credentials or surprising endpoints.
Instruction Scope
SKILL.md and scripts parse JSON responses with jq (examples and scripts call jq), but the declared required binaries list only includes curl — jq is not declared, which will break the script or cause silent failures. The included script downloads whatever URL the API returns without validating its hostname; if the API (or a compromised response) returns an unexpected internal URL, the skill will curl that address (possible SSRF-like risk). The instructions otherwise stay within the stated purpose and do not read unrelated files or env vars.
Install Mechanism
No install spec (instruction-only plus a small helper script) — nothing is downloaded or installed by the skill itself. This is low-risk from an installation perspective.
Credentials
Only SILICONFLOW_API_KEY is required and is the primary credential declared. That matches the claimed integration with SiliconFlow. No unrelated secrets or system config paths are requested.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It will run only when invoked and uses the API key provided; autonomous invocation is allowed but is the platform default.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install gen-image - 安装完成后,直接呼叫该 Skill 的名称或使用
/gen-image触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
初始版本:支持Kolors/FLUX/Qwen-Image模型生成图片
元数据
常见问题
AI图片生成 是什么?
AI生成图片,支持Kolors/FLUX/Qwen-Image等模型(需SiliconFlow API). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 473 次。
如何安装 AI图片生成?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install gen-image」即可一键安装,无需额外配置。
AI图片生成 是免费的吗?
是的,AI图片生成 完全免费(开源免费),可自由下载、安装和使用。
AI图片生成 支持哪些平台?
AI图片生成 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 AI图片生成?
由 asdas(@duyiliu)开发并维护,当前版本 v1.0.0。
推荐 Skills