← 返回 Skills 市场
terrycarter1985

Marketing Asset Generator

作者 terrycarter1985 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
82
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install marketing-asset-generator
功能描述
AI-powered marketing asset generation workflow. Combines DuckDuckGo design inspiration search, Gemini Nano Banana Pro image generation, Feishu Drive cloud st...
安全使用建议
The skill's functionality (Gemini image generation → Feishu upload → Slack notify) matches its code, but the registry metadata omits the many required secrets listed in SKILL.md and used by the code. Before installing: 1) Do not paste production credentials directly — create least-privilege API keys/service accounts for Gemini, a Feishu app with narrowly scoped upload permissions and a limited folder token, and a Slack bot token with only the needed scopes (chat.postMessage, files:write). 2) Verify the skill's provenance (origin repository, maintainer identity) since the package source is 'unknown' in the registry. 3) Inspect the code yourself or in a sandboxed environment; run it with test/placeholder credentials first. 4) Confirm the registry metadata is corrected (declare required env vars) or get an explicit explanation from the author; the metadata mismatch is the main reason this is flagged as suspicious. If the owner/metadata are verified and credentials are scoped appropriately, the code itself is consistent with the described purpose and the risk lowers.
功能分析
Type: OpenClaw Skill Name: marketing-asset-generator Version: 1.0.0 The marketing-asset-generator skill provides a legitimate automated workflow for generating marketing images using Gemini AI, uploading them to Feishu Drive, and notifying a Slack channel. The code in marketing_asset_workflow.py correctly implements the described features using standard libraries (google-genai, slack-sdk, requests) and handles sensitive credentials via environment variables as expected for this type of integration.
能力标签
requires-oauth-token
能力评估
Purpose & Capability
The name/description (marketing asset generation) align with the code and SKILL.md: it uses DuckDuckGo for inspiration, Google Gemini for image generation, Feishu Drive for storage, and Slack for notifications. Required binaries (python3) and Python dependencies match the stated purpose. HOWEVER the registry metadata at the top of the evaluation reports 'Required env vars: none' while the SKILL.md and the code require multiple secrets (GEMINI_API_KEY, FEISHU_APP_ID, FEISHU_APP_SECRET, FEISHU_TARGET_FOLDER_TOKEN, SLACK_BOT_TOKEN, SLACK_TARGET_CHANNEL_ID). That discrepancy is an incoherence in the package metadata.
Instruction Scope
SKILL.md and the included Python file describe and implement only the advertised workflow: searching DuckDuckGo, calling the Google genai client, saving image files locally, uploading to Feishu via its API, and posting messages/files to Slack. The code reads environment variables (and .env via python-dotenv), writes generated images to the local working directory, and performs network requests to external APIs. There are no instructions to read unrelated local files, modify other skills, call arbitrary third-party endpoints, or exfiltrate broad system data.
Install Mechanism
The skill is instruction-only (no install spec) and includes a requirements.txt of typical public Python packages (python-dotenv, duckduckgo-search, google-genai, requests, requests-toolbelt, slack-sdk). No downloads from untrusted URLs or archive extracts are present. The install approach is standard for a Python package; risk is the usual dependency risk but nothing suspicious in the install mechanism itself.
Credentials
The environment variables referenced by SKILL.md and the code (Gemini key, Feishu app id/secret + folder token, Slack bot token + channel id, optional mention string) are proportionate to the described integrations. The main concern is the metadata inconsistency: registry-level metadata claims no required envs while the runtime instructions require multiple credentials. That mismatch could be an oversight, but it matters because users may be asked to supply high-privilege secrets without the registry signalling it.
Persistence & Privilege
The skill does not request permanent presence (always:false) and does not attempt to modify other skills or system-wide agent settings. It stores generated images locally and uploads them to Feishu, but does not persist credentials or change agent config. Autonomous invocation is enabled by platform default but not combined with other high-risk flags.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install marketing-asset-generator
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /marketing-asset-generator 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: Complete marketing workflow with DuckDuckGo inspiration search, Gemini Nano Banana Pro image generation, Feishu Drive storage, and Slack notifications
元数据
Slug marketing-asset-generator
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Marketing Asset Generator 是什么?

AI-powered marketing asset generation workflow. Combines DuckDuckGo design inspiration search, Gemini Nano Banana Pro image generation, Feishu Drive cloud st... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 82 次。

如何安装 Marketing Asset Generator?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install marketing-asset-generator」即可一键安装,无需额外配置。

Marketing Asset Generator 是免费的吗?

是的,Marketing Asset Generator 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Marketing Asset Generator 支持哪些平台?

Marketing Asset Generator 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Marketing Asset Generator?

由 terrycarter1985(@terrycarter1985)开发并维护,当前版本 v1.0.0。

💬 留言讨论