Generate images from text prompts using the Jimeng API with customizable size, scale, seed, and output path via Python scripts.

What to check before installing or running this skill: - Credentials: The SKILL.md and script require environment variables Jimeng_Access_Key and Jimeng_Secret_Key, but the skill metadata does not declare them. Do not provide secrets until you are comfortable with where they will be sent. Prefer creating a scoped API key with minimal permissions. - Review network dependency: The script uses volcengine-python-sdk (a third-party package). Inspect that package's source or install it in an isolated environment if you plan to run the skill. - Inspect the script: The script writes PNG files to the configured output_path. Note it uses '~' in the default path but does not call os.path.expanduser, so it may create a directory literally named '~' rather than your home path — test in a safe directory first. - Prompt-injection artifact: The SKILL.md contains unicode control characters flagged by a scanner; this could be benign (bad encoding) or an attempt to evade detection. Open the file in a hex/clean-text viewer and remove unexpected control characters. - Run in isolation: Because the skill will call an external image-generation API with your keys, run it first on a throwaway account or in an isolated container/VM to verify behavior and network endpoints. - Metadata fix: Prefer installing only after the skill owner updates the registry metadata to declare the required environment variables and primary credential so you can audit permissions more easily. If you want, I can: (1) show exact lines in SKILL.md that contain control characters, (2) suggest a minimal patched version of the script (expanduser, create intermediate dirs), or (3) provide commands to run the script safely in a container.

Type: OpenClaw Skill Name: jimeng-image-skill-openclaw Version: 0.1.0 The skill is a standard implementation for generating images using the Jimeng (Volcengine) API. The Python script (scripts/main.py) uses the official 'volcengine-python-sdk' to process requests and correctly handles API credentials via environment variables. There are no signs of malicious intent, data exfiltration, or dangerous command execution in either the code or the agent instructions (SKILL.md).