← 返回 Skills 市场
Image Generate
作者
zhangsiyuan123123
· GitHub ↗
· v1.0.0
2899
总下载
0
收藏
153
当前安装
1
版本数
在 OpenClaw 中安装
/install image-generate
功能描述
使用内置 image_generate.py 脚本生成图片, 准备清晰具体的 `prompt`。
安全使用建议
Use a scoped Ark/Volcengine API key, avoid sensitive personal data or secrets in prompts, install the required SDK only from a trusted source, and set IMAGE_DOWNLOAD_DIR only to a directory where you want generated images saved.
功能分析
Type: OpenClaw Skill
Name: image-generate
Version: 1.0.0
The skill bundle is classified as suspicious due to a critical shell injection vulnerability and potential arbitrary file write. The `SKILL.md` instructs the agent to execute `python scripts/image_generate.py "<prompt>"`, directly embedding the user-provided prompt into a shell command without apparent sanitization, which could lead to arbitrary command execution if the agent's execution environment does not handle this. Additionally, the `scripts/image_generate.py` script uses the `IMAGE_DOWNLOAD_DIR` environment variable to determine where to save generated images, posing a risk of arbitrary file writes or path traversal if this variable can be controlled by an attacker.
能力评估
Purpose & Capability
The purpose and capability are coherent: the skill runs an included Python script that calls the Volcengine Ark image-generation SDK with a user-provided prompt. There is a minor documentation mismatch: the skill says it returns image URLs, while the code downloads images and prints local file paths.
Instruction Scope
Instructions are scoped to image generation. The documented command includes a quoted prompt placeholder; agents should pass the prompt as one argument rather than interpolating untrusted text through a shell.
Install Mechanism
No installer or dependency setup is included, while the script imports volcenginesdkarkruntime. Users may need to install that SDK separately from a trusted source.
Credentials
Use of MODEL_IMAGE_API_KEY or ARK_API_KEY is expected for this provider integration. Prompts are sent to an external image-generation service, and this should be considered before entering sensitive content.
Persistence & Privilege
The script does not show background persistence, privilege escalation, broad local reads, credential exfiltration, or destructive behavior. It writes generated image files to IMAGE_DOWNLOAD_DIR or the current directory using generated filenames.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install image-generate - 安装完成后，直接呼叫该 Skill 的名称或使用
/image-generate触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of image-generate skill:
- Generate images from clear and specific text prompts using the included image_generate.py script.
- Returns the image URL as output; prints errors on failure.
- Supports API key authentication via multiple environment variables.
- Documentation includes example usage and recommended steps.
元数据
常见问题
Image Generate 是什么？
使用内置 image_generate.py 脚本生成图片, 准备清晰具体的 `prompt`。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2899 次。
如何安装 Image Generate？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install image-generate」即可一键安装，无需额外配置。
Image Generate 是免费的吗？
是的，Image Generate 完全免费（开源免费），可自由下载、安装和使用。
Image Generate 支持哪些平台？
Image Generate 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Image Generate？
由 zhangsiyuan123123（@zhangsiyuan123123）开发并维护，当前版本 v1.0.0。
推荐 Skills