OpenAI Image CLI

Generate, edit, and manage images via OpenAI's GPT Image and DALL-E models.

This skill appears to be a wrapper around a third-party npm CLI (@versatly/openai-image-cli) and legitimately needs an OPENAI_API_KEY. Before installing or using it: 1) Verify the npm package and GitHub repository (review code, recent commits, and maintainers) to ensure it does nothing unexpected. 2) Be aware the SKILL.md expects you to install a global npm package even though the registry lists no install spec—the agent will not auto-install it. 3) Use a scoped OpenAI key or billing limits if possible (don't expose a full-access key). 4) Avoid installing global packages with elevated privileges (sudo) unless you trust the source. 5) If you need stronger guarantees, request the skill author add an explicit install spec and correct the declared requirements (bins/envs) in the registry so the skill's metadata matches its runtime instructions.

Type: OpenClaw Skill Name: openai-image-cli Version: 1.0.0 The skill bundle is classified as suspicious primarily due to the `npm install -g @versatly/openai-image-cli` command found in `SKILL.md`. While this is a standard method for installing CLI tools, it represents a significant supply chain risk as it executes arbitrary code from an external npm package with global system permissions. This constitutes a risky capability without clear malicious intent within the provided instructions. There is no evidence of prompt injection attempts against the agent, data exfiltration, or other directly malicious instructions in the analyzed files.