mdclaw多模态图片视频生成

MDClaw OpenClaw API 技能，支持文字转语音(TTS)、文生图(Text to Image)、文生视频(Text to Video)、图生视频(Image to Video)等多模态 AI 能力。通过网关服务统一调用，支持账号注册、图片上传、任务轮询等完整功能。

Key points to consider before installing: - The client will send your prompts, API key, and any uploaded files to the external gateway at backend.appmiaoda.com. Do not upload sensitive images or data unless you trust that endpoint and its operator. - The code and clawhub.toml require MDCLAW_API_KEY, but the registry header metadata omitted that—this mismatch is a red flag. Verify credentials handling and update metadata before trusting automated installs. - The package has no listed homepage or identifiable owner; if you need this skill, ask the publisher for provenance (who runs the gateway, privacy/data-retention policies, and SLA). - If you want to test it, run in an isolated environment or sandbox with a throwaway API key and avoid uploading private files. Monitor egress traffic to confirm only expected endpoints are contacted. - If you cannot confirm the gateway operator or metadata, prefer alternative well-known providers or self-hosted solutions. If you proceed, grant the minimum necessary permissions to the API key and rotate it after testing.

Type: OpenClaw Skill Name: mdclaw-openclaw Version: 2.0.1 The skill bundle provides a client for the MDClaw multi-modal AI service (backend.appmiaoda.com). It is classified as suspicious due to high-risk capabilities in mdclaw_client.py, specifically the upload_image function which reads local files and transmits them to a remote gateway, and functions for handling user credentials (agent_register/agent_login). While these features are documented in SKILL.md and README.md as necessary for the service's image-to-video functionality, they lack path sanitization and represent a significant attack surface for prompt injection where an agent could be manipulated into exfiltrating sensitive local data.