Seedream 5.0 Lite image generation

Seedream 5.0 Lite image generation and editing on PoYo / poyo.ai via `https://api.poyo.ai/api/generate/submit`; use for `seedream-5.0-lite`, `seedream-5.0-li...

This skill simply sends your prompt, optional reference images, and settings to PoYo's Seedream 5.0 Lite API using your POYO_API_KEY. Before installing or using it: 1) Only provide a POYO_API_KEY you trust and understand that prompts and any provided images will be transmitted to api.poyo.ai. 2) If you use callback_url in payloads, ensure the URL you supply is under your control and can safely receive results (webhooks may receive task metadata). 3) The included script reads POYO_API_KEY (or accepts an API key as the first arg) and reads the JSON payload from a file or stdin — be careful when passing positional arguments (if POYO_API_KEY is set in the environment, the script treats the first positional arg as the payload filename). 4) Review any payload you submit (to avoid accidental disclosure of other secrets) and confirm compliance with any copyright/privacy constraints for images you submit.

Type: OpenClaw Skill Name: poyo-seedream-5-0-lite Version: 1.0.0 The skill bundle facilitates image generation and editing via the PoYo API (api.poyo.ai). It includes a shell script, `scripts/submit_seedream_5_0_lite.sh`, which uses `curl` for network access and `cat` to read payload files provided as command-line arguments. While these capabilities are plausibly necessary for the stated purpose, the script lacks any validation or sanitization of the file path argument, which could allow for arbitrary file read and exfiltration if the AI agent is targeted by prompt injection. Per the provided criteria, these risky capabilities without clear malicious intent are classified as suspicious.