← 返回 Skills 市场
luhuiwang

Ms Ai

作者 Luhui WANG · GitHub ↗ · v1.2.1 · MIT-0
cross-platform ⚠ suspicious
174
总下载
0
收藏
1
当前安装
8
版本数
在 OpenClaw 中安装
/install ms-ai
功能描述
ModelScope AI 技能:生图、改图、析图、生文。支持文生图、图生图、视觉理解、文本生成,遇到限速自动轮换模型。
安全使用建议
This skill appears to implement exactly what it claims (ModelScope text/image/vision) but it requires MODELSCOPE_API_KEY(s) and the registry metadata does not declare that — so the platform record is incomplete. Before installing: 1) Verify you are comfortable storing MODELSCOPE_API_KEY in ~/.openclaw/openclaw.json (this stores keys in plaintext) or prefer exporting the env var instead. 2) Prefer creating a limited-privilege / limited-quota ModelScope key and rotate it if exposed. 3) Be aware the scripts print the first ~12 chars of each API key to stderr; if you collect logs or share stderr, that could leak key fragments — consider removing or changing that logging in common.py. 4) Confirm network access to https://api-inference.modelscope.cn/ is acceptable and that you consent to sending images/prompts to that service (images are uploaded/base64-encoded). 5) Ask the publisher or registry maintainer to update the skill metadata to declare MODELSCOPE_API_KEY as a required credential so the requirement is visible prior to install. If you want higher assurance, inspect the included Python files locally (they are small and readable) before running.
功能分析
Type: OpenClaw Skill Name: ms-ai Version: 1.2.1 The ms-ai skill bundle is a well-implemented interface for ModelScope AI services, including image generation, vision analysis, and text generation. It features a robust model and API key rotation mechanism in `scripts/common.py` to handle rate limiting (HTTP 429). The scripts (`generate.py`, `vision.py`, `text.py`) perform standard API interactions with the legitimate ModelScope endpoint (api-inference.modelscope.cn) and include helpful instructions in `SKILL.md` for the AI agent to select appropriate image dimensions based on user context. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
能力评估
Purpose & Capability
Name, description, SKILL.md and the Python scripts consistently implement text/image generation and vision features via the ModelScope API (api-inference.modelscope.cn). Functionality matches the stated purpose. However the registry metadata declared no required environment variables/primary credential while the code and SKILL.md clearly require MODELSCOPE_API_KEY (supporting multiple comma-separated keys). This mismatch is an incoherence: the skill will fail without the key but the registry does not advertise that requirement.
Instruction Scope
SKILL.md and scripts are explicit about what to run (pip install requests Pillow; run the provided scripts) and instruct editing ~/.openclaw/openclaw.json to supply MODELSCOPE_API_KEY. The scripts only read image files, a history JSON, and the MODELSCOPE_API_KEY; they transmit images/prompts to ModelScope endpoints (expected). A notable issue: the code prints the first ~12 characters of each API key to stderr when selecting keys (potential secret leakage into logs). Otherwise instructions do not request unrelated system files or unrelated credentials.
Install Mechanism
There is no install spec that downloads arbitrary code; the package includes Python scripts and documentation. Runtime requires pip packages (requests, Pillow) which the SKILL.md documents. No external binary downloads or obscure URLs are used by the install process. Network calls at runtime go to the documented ModelScope endpoints.
Credentials
The skill legitimately needs MODELSCOPE_API_KEY (and supports supplying multiple keys). Requesting a single API key for the service the skill integrates with is proportionate. However the registry metadata omits declaring this requirement (it lists no required env vars), which is misleading. Additionally, scripts reveal the first ~12 characters of each API key in stderr, which could leak key fragments into logs/telemetry; this is unnecessary and increases risk. No other unrelated credentials are requested.
Persistence & Privilege
The skill does not set always:true and does not request elevated platform privileges. It asks the user to add a skill-scoped env entry to ~/.openclaw/openclaw.json (normal for skill-level config). The scripts do not modify other skills or system-wide config beyond advising how to add its own setting.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install ms-ai
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /ms-ai 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.1
- 新增 _meta.json 文件,增加元数据支持。 - 其他无功能或代码变更。
v1.2.0
新增 --aspect 预设参数(16:9, 9:16, ppt, douyin 等),默认尺寸改为 1920x1080,SKILL.md 新增场景→尺寸速查表
v1.1.1
默认尺寸改为1024x1024,支持PPT/视频/海报/封面等不同场景自动适配尺寸
v1.1.0
Key 轮换:支持多个 API Key(逗号分隔),所有模型失败后自动切换下一个 Key。新增 common.py 共享模块,统一 Key + 模型双重轮换逻辑。
v1.0.3
文档优化,配置方式统一为 Skill 级别 env,README 更新
v1.0.2
配置方式改为 skills.entries.env,OpenClaw 自动注入环境变量
v1.0.1
修复:移除 openclaw.json 配置,统一使用环境变量 MODELSCOPE_API_KEY
v1.0.0
首次发布:生图、改图、析图、生文,模型自动轮换
元数据
Slug ms-ai
版本 1.2.1
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 8
常见问题

Ms Ai 是什么?

ModelScope AI 技能:生图、改图、析图、生文。支持文生图、图生图、视觉理解、文本生成,遇到限速自动轮换模型。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 174 次。

如何安装 Ms Ai?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install ms-ai」即可一键安装,无需额外配置。

Ms Ai 是免费的吗?

是的,Ms Ai 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Ms Ai 支持哪些平台?

Ms Ai 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Ms Ai?

由 Luhui WANG(@luhuiwang)开发并维护,当前版本 v1.2.1。

💬 留言讨论